last executing test programs: 8.453809879s ago: executing program 1 (id=4175): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@generic={0xf9, 0x9, 0x5, 0x9, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa94, 0x0, 0x0, 0x0, 0xbbbe}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x7, 0x1, 0x8, 0x0, 0x1, 0xfffffffffffffff4, 0x8}]}, &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x34, &(0x7f00000006c0)=""/52, 0x40f00, 0x4a, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0xb, 0x200, 0xb7b9}, 0x10, 0x1630b, 0xffffffffffffffff, 0x1, &(0x7f0000000cc0)=[0x1], &(0x7f0000000d00)=[{0x2, 0x3, 0x2, 0x2}], 0x10, 0xc}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000e00)) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x5}, 0x20) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2a8, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x21c, 0x1, [@m_xt={0x10c, 0xa, 0x0, 0x0, {{0x7}, {0xe4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x800}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x2a, 0x6, {0x2fe, 'nat\x00', 0x7, 0x1000}}, @TCA_IPT_TARG={0x55, 0x6, {0x8001, 'nat\x00', 0xe, 0x1000, "5b17aa89d80870c15066789ffc3b484ddb037d507299171c05cbd077a4e3492a17ecb2370233755138b385"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffd}, @TCA_IPT_TARG={0x2a, 0x6, {0x22, 'mangle\x00', 0x8, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xdc, 0x34, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x4, 0x0, 0x136bcb9c}, 0x6c}}]}, {0x75, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a3729"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x78, 0x1, [@m_gact={0x74, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0x45, 0x6, "3b5787a933d0695a3c65e24e5c4c8a9428e87983fcb08e778c4c16d937c9d6cdd2b42f9e24f75184f7dfdc33389e6615d6aa21fe6ee7d9836096a2743418947b1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000880)="f9cba037201e53aa48a066112d30c5c27835f3221cb61ac29d7ca999bfd84a2ab8237e818420d857ba5de42029cf79a63c2672825cb2d19434851764b53f0a1d304f116b3975291ffe05da52dcca230cf21f917dbbc337b2d0cfb0c02f71cb963b793609b0eb60b3f631810a66d515bd3549375de1a74be254b183a3bff557daca12d19276f0693e1fa94cb9645504e1977f6a4482c805a51c3cecaaccc20b398f1709ba6a3a8f37f18c2e4bb617cb92c606cfe4a4ac1a124ba029c96d4e411aeac4ef15ea64e754f4332df1cb94929088fd1f29aa55467b207d1d0884a2012ce97639ab65d858", 0xe7, 0x840, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060102ff000000000000000073797a300000006d61703a706f7274001c000780060005404200000006000440000000000800064000000000050001000700001605000400ac4f616640d87f00003527000000005337b4c2b4e3a2eb78e231050123984e289bd8ba140e9aac50cee1f1a0f495397e7df04f9be08a8a999b0c29ffa9a610929dad1819395c221072f09fa7fab2243e8d84c450c9491c80b215e6743fb37426070c4acd27080b748c1c40e7906b"], 0x64}}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="04"], 0x10) (async) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) bind$tipc(r3, 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)=0x8) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000340)=0x38ed, 0x4) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="14000200ff02000000000000000000000000000108000800028d"], 0x34}}, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x2) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000300)=0x3e62, 0x4) 8.277641672s ago: executing program 1 (id=4176): r0 = socket(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000480)=[{&(0x7f0000000240)="998e24c95c402375b5281f895bdebb9304000000af000000000000000000000000bc814c62585c1f72644789ee247d7ef4d1ff7c84d693dc06ce5d1e412ca7ce03e78fc10da258b9dabb1d117e479b7683af88832786a421c12ae2d872d863d22dd7610fe3db2edd3e9dd2ee5864b8a41c9ed4bb88490b3849c5ae6974a24f0ba262221a9614", 0x86}, {&(0x7f0000000780)="752b64e2b164b6a57830f2fda290f754347dbc27ae378276d56399634200401315ba5cb8482f9ced868a4c07763cb560906b5b4f520a5c96f79e49c1fe042280bdaf11021458492951f99e5c50714459bd5332eea7b1ea6ff7f209340cac76f81219254f513152e215c15287175e044e80ba8d5d1bbc2b0a894cc735bb5fbf867ea71e79212f5d3657fd311f04b3e0b629f014a1e762b564bfca99d06821d50be5ebd8ccf56d956950dfee62687f020d84ec33f853fa73a6333fb683c0d797f7fa20a0175fd22b27839a480a9c9f24514535", 0xd2}, {&(0x7f0000001240)="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", 0xea7}], 0x3, 0x9001, 0x7f) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4) sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)=@rc={0x1f, @any, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="3104effa68054476fe082e05da54db3ff32fa002c3c9b32542eeaba32f71535ffcb3e01e4b4f36b2ea07b4", 0x2b}, {&(0x7f0000000140)="a843abdc760125edaed7e8d8f54a7bd11bf0fd6a5539874aff4b23c8ba759d33e50fdfe30055f0b27cbb0de88ad48fb939090dae48328b6588ec6a724b91c7e8bf430f0854dc3d838568ac781ac52b3a99f88f41f4b59ae50aded4155d7c9f0a886f01efedc3a29b48128406f260b5cb7a83656fec20488a9a9b0348cccfb06eb3c171d11f91ccd119d0f211f2a9908a1f784057510b7890fb378a9d0b8d381d6f1012b073b05577ae9d64696b5246d04e6dc462b2b366f8b5261156bc5e1d7533a3ede97376896971", 0xc9}, {&(0x7f0000000240)="8984f188fc0a79a6d8a22e655b6c0aa7eb954fdecaafcf7cf540b3", 0x1b}, {&(0x7f0000000280)="9285125737e3e3e6aa42f3e28c7f8bb4eb229585085816426117fca20b3494120f010c915db6e680e615129b9249ea4ea0831cfafe104c05ca10e4d83c0e8bc4568f2d202acb7488baf1ad2ef07d4f60c417775d6d7ebd3693fa8feb5cc8847b672fffc4d231493df353ab325299cfcd5669c8466728bebc08a11ac9e3f14135276ed91a8fbe4c73f26ac785d6c98588334485f5f5fcbba299e77250f17b9b545b39c0fbe06d", 0xa6}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x380}}, {{&(0x7f0000000700)=@llc={0x1a, 0x311, 0x3, 0x1, 0x4, 0x27}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000780)="174f69512895b2820f087b9510800d9b630e33070f9fd50b9cb5c5ccff739c1303b3cd6984f214ab8e7e03acc6873fd131e402af6b8f91bd2fb9be6ee5d869165fd35661bfd5b9f68c691bc39e2a36e194ee59af2ebc1c8cfa9cf9823333cf2e8bb2f7e2c925f6f851d7d2444bb7a0eb91414071afe15947cdff01500f5ac45b567344d13dccabff94bede383363b96929381bbf6a", 0x95}], 0x1}}], 0x2, 0x1) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x40, 0x4, {0x15, 0x4, 0x2, 0x1, 0x4, 0x67, 0x5, 0x5, 0x67, 0x598f, @local, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xd6, 0x1, 0x3, [{@multicast2, 0xbede}, {@private=0xa010102, 0x2}, {@local, 0xb0e9}, {@loopback, 0x4}, {@multicast1, 0xf}, {@broadcast, 0xfffffffa}]}, @cipso={0x86, 0x6, 0x1}]}}}}}}}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0xc) 8.186407603s ago: executing program 1 (id=4177): socket$netlink(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet6(r1, &(0x7f00000000c0)="b2", 0x1, 0x24004844, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}], 0x1, 0x2400c044) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x970b) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000180)=0x9f7, 0x4) getsockopt$inet_opts(r4, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x5d) shutdown(0xffffffffffffffff, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000020c0)={&(0x7f0000002080)='afs_volume\x00', r2, 0x0, 0x1ff}, 0x18) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000010) unshare(0x62040200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r7, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@phonet={0x23, 0xff, 0x5, 0x9}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x3a0}}], 0x2, 0x0) 4.487019553s ago: executing program 1 (id=4198): syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000180c20000000800492d0038006600000501907864010101ac1414bb4404dcb289078bffffffff44043e50000d009078000100050000008200230000000008a8"], 0x0) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'pim6reg1\x00', {0x4}, 0xfc}) 4.265921079s ago: executing program 1 (id=4200): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="010000000200000000000002000000cf3029cd00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xc, [@var={0xa, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x4f, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x5c}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.13980317s ago: executing program 1 (id=4202): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800805014000000003040002000c00028005000100000004001400000008000200ac789c9e960005404c4157e8090001"], 0x58}}, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800805014000000003040002000c00028005000100000004001400000008000200ac789c9e960005404c4157e8090001"], 0x58}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r3, {0x5, 0xb}, {0x4, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) poll(&(0x7f0000000080)=[{r5, 0x46a8}], 0x1, 0x400) shutdown(r5, 0x1) (async) shutdown(r5, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x80) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x803, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, 0x0, 0xc000) getsockname$packet(r9, 0x0, 0x0) (async) getsockname$packet(r9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000e8d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 3.689038673s ago: executing program 2 (id=4208): socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe14}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x33) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00142002800800010008000000062102000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 3.626944899s ago: executing program 2 (id=4210): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xe, [0xb, 0xe, 0x10, 0x2, 0xd, 0xf, 0x7, 0xf, 0x5, 0xd, 0xb, 0x9, 0xb, 0xa, 0x2, 0x3], 0x0, [0x6, 0x7, 0x4, 0xffff, 0xc, 0x7, 0xcf, 0xffff, 0xc10, 0x7a, 0x2ff1, 0x1, 0x426, 0xf800, 0x4, 0x3], [0x1ff6, 0xd1, 0x2, 0xfe00, 0xfff7, 0x2, 0x8, 0x8, 0x2, 0x2, 0x7, 0x3, 0x4, 0x401, 0x7, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x6, 0x0, {{0x2f, 0x4, 0x2, 0x2e, 0xbc, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @loopback, {[@timestamp={0x44, 0x14, 0x51, 0x0, 0x8, [0x9, 0x18000000, 0xb68, 0x6]}, @timestamp_addr={0x44, 0x54, 0x6f, 0x1, 0x3, [{@multicast1, 0x6}, {@multicast1, 0x3}, {@broadcast, 0x1}, {@loopback, 0x1b29}, {@multicast1, 0x8a0}, {@broadcast, 0x875e}, {@multicast2, 0xff}, {@rand_addr=0x64010101, 0x4}, {@multicast1, 0x7}, {@remote}]}, @timestamp_prespec={0x44, 0x2c, 0x1c, 0x3, 0x8, [{@rand_addr=0x64010102, 0x396d}, {@local, 0x4}, {@empty}, {@private=0xa010100, 0x8001}, {@private=0xa010102, 0x400}]}, @end, @generic={0x88, 0x7, "88aa2c3b0b"}, @lsrr={0x83, 0x7, 0x57, [@dev={0xac, 0x14, 0x14, 0x3f}]}, @noop, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r13, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfffffffffffffecb) sendmsg$nl_route_sched(r12, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r14}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=@getqdisc={0x44, 0x26, 0x8, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0x0, 0xa}, {0xfff1, 0x8}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4091) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x194, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x44800}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000680)="1408000000000000b89e08dc86dd61fce717d48fa44f109a56d24da94590c267729e46a7f2f11b453b91418b73d922ed16a29f2fa95c", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.526213367s ago: executing program 2 (id=4211): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x9, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0x32, 0x0, 0x51, 0x3}, @enum64={0x3, 0x6, 0x0, 0x13, 0x1, 0x2, [{0x4, 0xff, 0x9c}, {0x7, 0x4, 0x2}, {0xb, 0x10001, 0x7}, {0x3, 0xec}, {0x7, 0x7, 0x8c}, {0xb, 0xffffffff, 0xc}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x75, 0x1}, @ptr={0x6}]}, {0x0, [0x5f, 0x61, 0x0, 0x61, 0x30, 0x61, 0x30]}}, &(0x7f0000000180)=""/151, 0xa1, 0x97, 0x1, 0x6b6a}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x9, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0x32, 0x0, 0x51, 0x3}, @enum64={0x3, 0x6, 0x0, 0x13, 0x1, 0x2, [{0x4, 0xff, 0x9c}, {0x7, 0x4, 0x2}, {0xb, 0x10001, 0x7}, {0x3, 0xec}, {0x7, 0x7, 0x8c}, {0xb, 0xffffffff, 0xc}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x75, 0x1}, @ptr={0x6}]}, {0x0, [0x5f, 0x61, 0x0, 0x61, 0x30, 0x61, 0x30]}}, &(0x7f0000000180)=""/151, 0xa1, 0x97, 0x1, 0x6b6a}, 0x28) (async) 3.487427757s ago: executing program 2 (id=4212): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000000000018500000007000000180100002020692500000000002020207b1af8ff00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000012500)) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)}, {&(0x7f0000000000)='\\', 0x1}], 0x2, 0x0, 0x0, 0x20004000}], 0x1, 0x20000800) unshare(0x2000400) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="020060d4b34bddc1ae7104d2755a4ee0a7d022fbd23f411100ff0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7040000080000009d000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000600)='xs_stream_read_data\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r7, 0x100, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000008, 0x0, 0x0, 0x36, 0x0, 0x0, 0x4, 0x5b, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) ppoll(&(0x7f0000000500)=[{r11}], 0x1, 0x0, 0x0, 0x0) 3.290068257s ago: executing program 0 (id=4214): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000004000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000208500000004000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300001f6d000280"], 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x40000) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/177, 0xb1}], 0x1}, 0xed88}], 0x1, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x10000, 0x60002, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) recvfrom(r1, 0x0, 0x0, 0x10020, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x16, 0x1, 0x0, 0xfffffffc, {0xa}, [@typed={0x4}, @typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c085}, 0x0) setsockopt$inet_opts(r4, 0x0, 0x19, &(0x7f00000002c0)="4096489bf9994a0f31fd2912c5588d7050271fc6a8355f99150be09b72a9a7415d7730a6ce114340137f39dd1fe67fb7a1a643f652daecabc2a606ecdfe123493c40fc49889a35a3fb1cbb64d9826e09eae30ebc6d59e9ad8c1fd7ec87eb47a9f73d139544c9b05066c963217f68689423b1982493f56676b26548bb5827f4bb3b10241c777c30bfb1bb433a2ed587d011bd6b026d77be23ed28f659929ace90cbedf759a5296018059d9d484004542a703be5cc74fdfd73061b84d506c66a2c043203d8b0d21b72", 0xc8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="000000297884cc259c0000000000000086910000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="c60000000820000000010000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 2.953296553s ago: executing program 0 (id=4217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000004000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000208500000004000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300001f6d000280"], 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x40000) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/177, 0xb1}], 0x1}, 0xed88}], 0x1, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x10000, 0x60002, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) recvfrom(r1, 0x0, 0x0, 0x10020, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x16, 0x1, 0x0, 0xfffffffc, {0xa}, [@typed={0x4}, @typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c085}, 0x0) setsockopt$inet_opts(r5, 0x0, 0x19, &(0x7f00000002c0)="4096489bf9994a0f31fd2912c5588d7050271fc6a8355f99150be09b72a9a7415d7730a6ce114340137f39dd1fe67fb7a1a643f652daecabc2a606ecdfe123493c40fc49889a35a3fb1cbb64d9826e09eae30ebc6d59e9ad8c1fd7ec87eb47a9f73d139544c9b05066c963217f68689423b1982493f56676b26548bb5827f4bb3b10241c777c30bfb1bb433a2ed587d011bd6b026d77be23ed28f659929ace90cbedf759a5296018059d9d484004542a703be5cc74fdfd73061b84d506c66a2c043203d8b0d21b72", 0xc8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="000000297884cc259c0000000000000086910000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="c60000000820000000010000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 2.493607319s ago: executing program 2 (id=4219): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000300000000000004000000080002000500000006000b000a"], 0x24}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x4, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0xc000) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r7, 0x0) ioctl$SIOCX25SDTEFACILITIES(r7, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xfff, 0x84, 0x7, 0x0, 0x91, "e758cae9ffed00000000b24000", "39e80000000000000000e30300"}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440"], 0xdc}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aaaaaaaa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) sendmmsg$inet(r9, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1b9ff8", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)}}], 0x2, 0x20008004) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) 1.741236521s ago: executing program 0 (id=4222): socket$netlink(0x10, 0x3, 0x0) (async) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x1, @private2, @local, {[@routing={0x89, 0x0, 0x2, 0x4, 0x11}]}}}}}, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) clock_gettime(0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$can_bcm(r1, 0x0, 0x4804) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$smc(0x0, r1) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) (async) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x40000000000038, 0x0, 0x1, 0x10000000000000], 0x4, 0x0, 0x0, [{}, {}, {}, {}]}, 0xb8) (async) write(r1, &(0x7f0000000000)='\"', 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r4) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) (async) unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) 1.678094257s ago: executing program 2 (id=4223): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, [@tail_call]}, &(0x7f0000000440)='GPL\x00', 0x8, 0x37, &(0x7f0000000480)=""/55, 0x41000, 0x24, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x1, 0xb79, 0xfffffff8}, 0x10, 0x19192, 0xffffffffffffffff, 0x7, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x4, 0x3, 0xe, 0x8}, {0x5, 0x1, 0x0, 0x3}, {0x3, 0x2, 0xc, 0x3}, {0x4, 0x1, 0x2, 0x9}, {0x4, 0x4, 0x2, 0x1}, {0x1, 0x1, 0xd, 0x9}, {0x4, 0x4, 0x4}], 0x10, 0x78}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r2, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8044) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r1, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x4, 0x10}, 0xc) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYBLOB="0a000100aaaaaaaa"], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 1.590134496s ago: executing program 3 (id=4224): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x80, @loopback, 0x98}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="2aee", 0x2}], 0x1}}, {{&(0x7f0000000680)={0xa, 0xa028, 0x8000, @dev={0xfe, 0x80, '\x00', 0x24}}, 0x1c, &(0x7f00000008c0)=[{&(0x7f00000006c0)="04534648ff", 0x5}], 0x1}}], 0x2, 0x8040) accept4(r4, &(0x7f00000003c0)=@x25={0x9, @remote}, 0x0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000180), &(0x7f00000002c0)=r7}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r8, &(0x7f0000001640)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xffffffffffffff18, 0x840, 0x0, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x7, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x4a}}) recvfrom$inet6(r0, &(0x7f0000000040)=""/47, 0x2f, 0x40, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=@newtaction={0x48, 0x5a, 0x1, 0xfffffffc, 0x25dfdbfe, {0x2}, [{0x34, 0x3, [@m_mpls={0x30, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffe01, 0x8, {0x2, 0x2}}}}]}]}, 0x48}}, 0x80c1) 1.576156708s ago: executing program 0 (id=4226): syz_emit_ethernet(0xa6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x6}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x2, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x6, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x4, 0x56}]}}}}}}}, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffbca, @private1, 0xccd0}, 0x20) 1.517859734s ago: executing program 3 (id=4227): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000004000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000208500000004000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000018000000bca3000000000000240300f840feffff720af0ff0000000071a4f1ff000000001f030000000000002e0a0200000000002600030008ff000e61145e00000000001d430000000000007a0a00fe00581c1f6114500000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad3"], 0x0}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300001f6d000280"], 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x40000) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/177, 0xb1}], 0x1}, 0xed88}], 0x1, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x10000, 0x60002, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) recvfrom(r1, 0x0, 0x0, 0x10020, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x16, 0x1, 0x0, 0xfffffffc, {0xa}, [@typed={0x4}, @typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c085}, 0x0) setsockopt$inet_opts(r4, 0x0, 0x19, &(0x7f00000002c0)="4096489bf9994a0f31fd2912c5588d7050271fc6a8355f99150be09b72a9a7415d7730a6ce114340137f39dd1fe67fb7a1a643f652daecabc2a606ecdfe123493c40fc49889a35a3fb1cbb64d9826e09eae30ebc6d59e9ad8c1fd7ec87eb47a9f73d139544c9b05066c963217f68689423b1982493f56676b26548bb5827f4bb3b10241c777c30bfb1bb433a2ed587d011bd6b026d77be23ed28f659929ace90cbedf759a5296018059d9d484004542a703be5cc74fdfd73061b84d506c66a2c043203d8b0d21b72", 0xc8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="000000297884cc259c0000000000000086910000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="c60000000820000000010000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 1.426125316s ago: executing program 4 (id=4228): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x3e, 0x2, 0x1, @mcast1, @loopback={0x0, 0xffff888101827518}, 0x40, 0x700, 0x5, 0x7ff}}) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0x10, 0x0, &(0x7f00000002c0)="f8ad48cc02cb29dcc8007f5b08007125", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'virt_wifi0\x00'}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffe00080009000000000008000a000000000008000a00000000"], 0x184}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200), 0x0) (async) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="5fa1cc6475604fc77e0ce3f7125b35d9060da80bbb8d5985dfa34fdba59faf7671723318fffc7bb6e42dcac65ab15bdd30a6c8461cc5dc69178e1697e18cd2c6a0bb", 0x42}], 0x1) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) (async) writev(r5, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) close(r7) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r8, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) write$cgroup_int(r9, &(0x7f0000000140), 0xfffffdef) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)=ANY=[@ANYBLOB="4c0000001200010026bd7000fedbdf250ba3049b4e204e1f070000000000000000000040070000000d0000000400000006000000d60b0000", @ANYRES32=0x0, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x40000880}, 0x20008000) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) 1.380880508s ago: executing program 0 (id=4229): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000000000018500000007000000180100002020692500000000002020207b1af8ff00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000012500)) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)}, {&(0x7f0000000000)='\\', 0x1}], 0x2, 0x0, 0x0, 0x20004000}], 0x1, 0x20000800) unshare(0x2000400) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="020060d4b34bddc1ae7104d2755a4ee0a7d022fbd23f411100ff0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7040000080000009d000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000600)='xs_stream_read_data\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r7, 0x100, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000008, 0x0, 0x0, 0x36, 0x0, 0x0, 0x4, 0x5b, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) ppoll(&(0x7f0000000500)=[{r11}], 0x1, 0x0, 0x0, 0x0) 1.216749335s ago: executing program 4 (id=4230): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x1c}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) epoll_create1(0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x2003, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, &(0x7f00000002c0)={0x1ff, 0x0, 0x7, 0x9, 0x3, 0x4000, 0x7fffffff}, 0x0, 0x0) socket(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000540)={0x67446698, 0x0, 0x3, 0x2, 0x2, "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"}, 0x1010) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x82, 0x3}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000003c0)=0x498e, 0x4) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f00000036c0)={0xa, 0x4e01, 0x800, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="122b46f898824e0060b7a0b7464802e15f6291eed9dee846769b5b81743a32bd5265b799cecc4ecf3cff4cd033324a06f75fbb6176fa6804c6811e1e0797136dd512fdc0433ec805f4e0e24dee", 0x4d}, {&(0x7f0000000100)="58b8e1c573b0446093ceea8320b6780de416eda57065b49b7876e0e8696342b645373c842f8cf8c64a4c82e09f3c08a88644f1a3c5976a385a3c62c2ee46e9aafeb89950797670dcd51600ecfdf31412a1521bfa20def4f27c2bfc24e571b11a1b8303f6d91d9dff5b6703cbd49c70383e696497ae5ebd33d3fb30a698bf352841a370adc0d49abf1baabe18a8057a45d53e2e731e265ea3470e144cf6e1f1c7667a74f8e5e2f5f171ec23c157c48896245bf944b63da3fd39062176617a14d554f3d0ab7172970e3594d79b86502a78290d353c044af6", 0xd7}, {&(0x7f0000000200)="af7b7b2c4ca1b1e8b4623219787178972e4b2a91a2a3cc021a6e21c5994950ab998c0801889ac102183b3885b35d5e8e05d033a71a58b3e4bba24389c37638251a86a60be0f079bb13b417bd5bd9b0af5289acb9c1f367e2785f2cee95fffac40ceae0d51a15a13cd781f6e4d516cc3dde52bebe22bb1c1db60c214cbadad1a809e9f5384871dc438f28c122a5feb3e36c40630459d54f4e0bae2be1d0e20d72b6d26224d6db0f05e0d3ef56157e3d08ffbf4c69aae64424d382b5a9", 0xbc}], 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="1440000000000000290000003e00000000000000000000007800000000000000290000003900000040f6ea35da00605b77e21d9f7b544732670c011000000000fe88000000000000000000000000010100000000000000000000ffffac1414bbff020000000000000000000000000001160200000000000000000000000000012001000000000000000000000083a718c85331a493000000000000000000001124b58703c4761a011400000000000000290000003e000000"], 0xa8}}], 0x2, 0x24004040) 652.066262ms ago: executing program 3 (id=4231): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) (async) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000001c0)=0x4, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x1005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r1 = accept4$rose(0xffffffffffffffff, &(0x7f00000025c0)=@short={0xb, @dev, @null, 0x1, @bcast}, &(0x7f0000000140)=0x1c, 0x80000) sendmsg$inet(r1, &(0x7f0000002580)={&(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000000280)="a4f0531cc7dc0013ef7e8c8ebdc6eb3c1136431005c2e03938f9cd591ba2901eb829860cd0dea509bedc84d0a495973c77bc121e6b47b45d00571eecdd51d1876c0f1ba991bdc70b3fe7bfd07c334817acc444e03b9e136480c0a3b4455be79e4ebdef848966b0a328d8e2afc0e7e7c2a7b9e2bb54f9e56afc1cabf4a68d57c914dc358311cfc448e9eeea6d434ca2f81713f33b412330b69670598036a41235e3332bdd350a6fd5a3e3e5c75522961c1ed100be131cb3a4b9", 0xb9}, {&(0x7f0000000340)="74e482677742f59828c49754f9d76832e2e48a8e3b312c782faf33f865ef7ff83b12cbc6185a2962a5afe6af6d443a57f98211f7b7c8357630235b32e4eaac0e8fcbf4dfd3bff88d0606124c22f9783b448a12926e9a6a47bacc3f34ee92", 0x5e}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="e41595a2ace7ea28a6d8a4c68039f507e9ea21eddbb0378f7604d16b0284d8a29e4e3f70c1a2d2266dfbbcd811c7a4f0f4309395fbc9f2a535aad91082a99692a8bdad4e9911fe4c3dbaf2574106bf06990fecd6a58e375dccea0643f7e34652489cba4541a3bd1bae3cd8a9834f3908b8024f6cfb7caba9db8e026fb647fb705f35407de4bd213c9ddba27eeb9a263bb2ae241dc37815b0bba95ab15f9d7b053132fb9825fe537bbafc401a173bf70610f0d22f25fa544a9206dc5e6aea8b27eea2da0fb2d31e7ab8d036d7456f4fcb9f28e989b928540732", 0xd9}, {&(0x7f00000001c0)="a4f6d4c51aa903ec18596e15963b77ccadc1b4481c0c5230a606", 0x1a}], 0x6, &(0x7f0000002540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x18}, 0x40811) 441.038808ms ago: executing program 0 (id=4232): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r5, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x2c, r10, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x3, 0x8, 0x18, @mcast1, @empty, 0x8000, 0x80, 0x8000, 0x4a91fb1}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f00000007c0)) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r12, @ANYBLOB="08000a00d5d006142728558792dadd3ead284f56f9753b61c57e0aa3a5b9", @ANYRES32=r12, @ANYBLOB="0a000100aaaaaaaa"], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x0) sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000100)={0xa, 0x4e21, 0x7, @remote, 0x10}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000140)="ff048f00d2b02ee273f915beea1906425cd645b9a62a82fe33c0d4777cd87175c2ffa1779c718e5e4c9257450a3fa030859d56f5ac2cdf4890b2e01d3e423429adbac9d0a1cf93fcb8678c2088338b5bbf9462ea364b49625c91873d61442ddeee041d2314110a66fc1d1205acc7422fcf284dafaae8e561d0d34765bdefb4d9e536e46b09c41bf200a88a49547e440960c3ffb1a01a9cba", 0x98}, {&(0x7f0000000200)="23393039202f64712eba0202339c66acc94bc05cd9e16fa191c2497f0a07954f9726cfcdf7a097eb9b6565bd9356ac491c1fbcca2589e8e4c44190427b8ee58bd3acca228fd6cdcdc209742f3501843f82d9d27a744abbef444d79a4546f097b05818ca95cbffb6f5fde52122f68c47d7dc66c42a0cf386d23990159b8ad8e7c017c7593586f3dbd58fce367e0e231c14875d1a2adc7b633ca72ccb2fea04881afc03c4682acd7bc106c0ea9f21964", 0xaf}, {&(0x7f00000002c0)="bd1c1fe2d7c817bc15b0114ed3d7738f42196f7163ebb940909dc139b7c9dbdd106e3fd341bc10407a6b602c692582c6e11207b6d588b5ba5ed3ad868d7694b65d8c6b3b9b4188b7ce6f2e7f43d8d013e3dce2557e17f36b8e46ff90a18a98b70ed04686a9b9d8979b11d2ba6ad7d032a267bf507ed26d093ee265fc3e9368faff690714b0c64e3487d92eb33373970b7032f3028805c7c3414d6c6cc63c9326cf17a6711fbfce6dda4089aefdf816b87867bbf72038c74e1bc5ae951c1087bd4770bd4afe4ea901a1edff6d60c7b91586675f6225", 0xd5}, {&(0x7f00000003c0)="8a0fadc870270a6b73e77d319cbf83832fc63fe14d83541fdd2bc4904e27db7fe84664018c1ea4e782d6a399bdbf108dbee222498f3bcc29e9561b2371d79bc7ebf8230b6392c18d96857546b61c92e3c28fd0820d2e45b44f85303e74b95881cf", 0x61}, {&(0x7f0000000440)="83af2fc1671297a40cca35e199a6646067aab5d6ea873a25046ce3574bcb27950c6361049f3e9b76b8684e3eb5f0a39117dfebdce4edbf4aa4ccceeaa2010df0cc70849875d136e79e2e7d55eea0b23943a45058aed94e3ef91cd0135079dad73d7dc715507993b6023aa5e260fc05f41be976c360f0460ae24d7ad0700ddcef5ac644d61451492b99b2fb10ce26cd43e4b336568b3f1055359ab40fbe3544abb67ce676e0acf14846e93344a4069d935343d3d58d03bd4bff5ec9f7b364c8c320d05d269a5276807f937454233cb66d7d929f3190df969e091d9d639fee4be6c70d01386b8926549195709d21a4a6b28865", 0xf2}, {&(0x7f00000005c0)="eef4b3040f18754aa271024356a31757fd4ce6723e2c2533cd780074336f6b08ea", 0x21}, {&(0x7f00000006c0)="1d37438b8cc0c857878072f30a6911ee1b28f9085d1afb6c7ff3a31d0eb0fe6171a8dfdb76295b5af3bcfb4a24c10106b40d4855022d77154f3665aa7d880b7053e8db299c2740afd75aaee51a14ea7f82d39f827ef81db00e90aaf132cf11cef5", 0x61}], 0x7, &(0x7f0000000c00)=[@dstopts={{0x190, 0x29, 0x37, {0x88, 0x2e, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0xf9}, @ra, @ra={0x5, 0x2, 0x1ff}, @calipso={0x7, 0x40, {0x2, 0xe, 0xe, 0x2784, [0x767, 0x9, 0x1, 0x2, 0x6, 0x1, 0x6]}}, @hao={0xc9, 0x10, @private2}, @generic={0x3, 0xec, "b31e3f519f5babad802388a0cbeb4b4644f7faacce6c17d993d0821e9f2090728793473c8984bf85977681431c8d9b0e4ebe146b97cf051e191af142ab837c2e72abf626add5500423b169c90f2ddae98ae314f22c687d8d2e0d89299354671bf3546b6eacf93789a0a80c817b6335ba5f35dc210df4b12644109e78412295d6a53481828dfc8eea64ae45362040195663d91f6ba913048111122fe98da9877a1c335b24cdf1a3866990857253f01abb93a58716ef3294b64bc36eb874bb3ff67b5caadaa56c66b027a55d0f0fd14dddec971eb5c3c526f5e663d9d03c89b0b4f3f00d7196058d4d46aaca93"}, @ra={0x5, 0x2, 0x8}, @generic={0x7, 0xd, "9d26d781e248b557afb6e716b6"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x2, 0x3, 0x0, [@private1, @ipv4={'\x00', '\xff\xff', @empty}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x29, 0xe, 0x2, 0x81, 0x0, [@local, @mcast1, @private0, @dev={0xfe, 0x80, '\x00', 0x20}, @empty, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}]}}}, @hopopts_2292={{0x238, 0x29, 0x36, {0x2b, 0x44, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x3}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x48, {0x2, 0x10, 0x2, 0xf5dd, [0x1, 0x7, 0x6, 0x100000000, 0x81, 0x8000000000000000, 0x7, 0x9]}}, @generic={0xc, 0xe5, "1c3d0bd68b7723f950cfb18b1a9daee075348691540b9f4d58a55b271a6efe3d8441edcb3e700a220313109a7f7f785bf39785e74a71c79f7fe903ef49e3d8f3ed0434e91c6d7a73c0e3fedcabcb5c0d6a5fb1ea9fd7e30c6040e3ef1aac73ac32a6c5505592fbb8f5edbce0b783becb09db19b74d661d4f56541013bdb422f48251e7a4ecfafa6d3640b90b27ea401d421d828efce8de3baa036654d3d324afb884b42083ce97aeb9e00a7ca629929f34d404affb1c976a702432fbf001799f2c82ff87f3c40cb3dff55d040e6ee3935b76c7d5a0b17d791bb919934e0ee50232af91fdde"}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x40, {0x3, 0xe, 0x3, 0x33, [0x7, 0x865, 0x9, 0x8, 0x7, 0x3, 0xe]}}, @generic={0x6, 0x86, "46b57ae2b427c874d9b74be75fa2c3eed2733e926124de96b898b06eb20c123f5af4a0bf2c0795fb45aec9ee503ea315aa91f92b3fc751ac7b1d916e90820251c28abbdb6094c15430f160b1b101fa79518fe488d153e37a8bf991cbb02b570ae8b6de25e7ff970babc0c9a4cad97b36adc2ca9e9e5a9cd7029680bd355145d71486c38efb10"}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x87a1}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r12}}}, @hoplimit={{0x14, 0x29, 0x34, 0xffffffc7}}], 0x520}, 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x9c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e9f91f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x271e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36a2bde9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74a90ca7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52cd95e5}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x9c}}, 0x0) socket$inet(0x2, 0x5, 0xa2e) 390.064655ms ago: executing program 3 (id=4233): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000300000000000004000000080002000500000006000b000a"], 0x24}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x4, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0xc000) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r7, 0x0) ioctl$SIOCX25SDTEFACILITIES(r7, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xfff, 0x84, 0x7, 0x0, 0x91, "e758cae9ffed00000000b24000", "39e80000000000000000e30300"}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440"], 0xdc}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aaaaaaaa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) sendmmsg$inet(r9, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1b9ff8", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)}}], 0x2, 0x20008004) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) 199.781274ms ago: executing program 3 (id=4234): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000280)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x1, 0x4, 0x2, 0x40, r4, 0x40000000}, 0x50) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6, 0x39}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 199.409409ms ago: executing program 4 (id=4235): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 133.957709ms ago: executing program 4 (id=4236): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004000000000000002400000085000000d400000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 80.915537ms ago: executing program 3 (id=4237): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180000008f0800000000000000000000850000004f000000850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x1a0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x58ca}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb5f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x374}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x98}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xadd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4cd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x99ce}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "4d447ebffe59a8038fdf9a0f223758b185c74476b66a68eff1251eb6925556324728b717"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "14e3dee3a803a0aa414977516ea178bd56d1f71b8f3bcfe3b12e0e781e0e01c4"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "57162284fbd1fab8e5d39ae97410edd1e7f495ebb4f0b049564a0e513066b5"}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000801) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.021219ms ago: executing program 4 (id=4238): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) (async) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x9, 0xd73, 0x3, 0x8, 0x8, 0x0, 0x100, {0x0, @in6={{0xa, 0x4e20, 0x7, @mcast2, 0xfffffffe}}, 0x360821d8, 0x5, 0xffff0000, 0x8000, 0x1}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={r1, 0x8}, &(0x7f0000000140)=0x8) (async) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, 0x0) 0s ago: executing program 4 (id=4239): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) shutdown(r0, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', 0x0}) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x100000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = getpid() ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000180)=r5) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) kernel console output (not intermixed with test programs): invalid length. [ 429.147541][T17138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.203875][ T9213] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.221500][ T9213] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.257830][ T9213] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.280975][T17443] syzkaller0: entered promiscuous mode [ 429.298403][T17443] syzkaller0: entered allmulticast mode [ 429.306933][ T9213] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.488583][T17452] wg1 speed is unknown, defaulting to 1000 [ 429.510078][ T9213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.523606][T17452] lo speed is unknown, defaulting to 1000 [ 429.535367][ T9213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.671213][T17460] can: request_module (can-proto-0) failed. [ 429.731272][ T3583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.740719][ T3583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.053710][ T30] audit: type=1800 audit(1757640589.989:10): pid=17460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2997" name="memory.events" dev="tmpfs" ino=3069 res=0 errno=0 [ 430.193547][T17476] netlink: 'syz.4.2915': attribute type 1 has an invalid length. [ 430.217247][T17476] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2915'. [ 430.347050][T17482] tipc: Enabling of bearer rejected, failed to enable media [ 430.405281][T17482] syzkaller0: entered promiscuous mode [ 430.431490][T17482] syzkaller0: entered allmulticast mode [ 430.508085][T17497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3003'. [ 430.594300][T17497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3003'. [ 430.683147][T17505] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3005'. [ 430.799750][T17509] syzkaller0: entered promiscuous mode [ 430.812247][T17509] syzkaller0: entered allmulticast mode [ 430.933542][T17497] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3003'. [ 431.414424][T17535] wg1 speed is unknown, defaulting to 1000 [ 431.442512][T17535] lo speed is unknown, defaulting to 1000 [ 431.638095][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3014'. [ 432.196730][T17564] netlink: 'syz.3.3021': attribute type 11 has an invalid length. [ 432.221167][T17562] syzkaller0: entered promiscuous mode [ 432.234069][T17562] syzkaller0: entered allmulticast mode [ 432.593242][T17590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3029'. [ 432.752990][T17598] syzkaller0: entered promiscuous mode [ 432.759289][T17598] syzkaller0: entered allmulticast mode [ 432.767321][T17601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3032'. [ 432.820374][T17602] netlink: 'syz.2.3034': attribute type 5 has an invalid length. [ 432.890773][T17601] bond1: entered promiscuous mode [ 432.896554][T17601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.003143][T17615] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3038'. [ 433.006480][T17612] syzkaller0: entered promiscuous mode [ 433.027342][T17612] syzkaller0: entered allmulticast mode [ 433.471475][T17631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'. [ 433.757977][T17635] wg1 speed is unknown, defaulting to 1000 [ 433.836625][T17635] lo speed is unknown, defaulting to 1000 [ 433.951997][T17640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3047'. [ 434.156719][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 434.171012][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 434.179209][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 434.187684][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 434.197690][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 434.293059][ T1040] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.328877][ T1040] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.426354][ T1040] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.444055][ T1040] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.467784][T17651] syzkaller0: entered promiscuous mode [ 434.476273][T17651] syzkaller0: entered allmulticast mode [ 434.543601][T17653] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3049'. [ 434.565010][T17653] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3049'. [ 434.575769][T17653] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3049'. [ 434.643303][T17653] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3049'. [ 434.658467][T17653] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3049'. [ 434.679136][ T1040] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.691246][ T1040] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.736113][T17647] wg1 speed is unknown, defaulting to 1000 [ 434.755583][T17647] lo speed is unknown, defaulting to 1000 [ 434.802744][ T30] audit: type=1107 audit(1757640594.749:11): pid=17657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='€' [ 434.893825][ T1040] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.919272][ T1040] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.542998][T17647] chnl_net:caif_netlink_parms(): no params data found [ 435.881847][ T1040] bond9 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 435.891843][ T1040] bond9 (unregistering): (slave ip6gretap2): Releasing backup interface [ 436.239849][ T5867] Bluetooth: hci2: command tx timeout [ 436.328128][ T1040] team0: Port device geneve0 removed [ 436.612626][ T1040] bond0 (unregistering): Released all slaves [ 436.753898][ T1040] bond1 (unregistering): Released all slaves [ 436.779060][ T1040] bond2 (unregistering): Released all slaves [ 436.819341][ T1040] bond3 (unregistering): Released all slaves [ 436.839237][ T1040] bond4 (unregistering): Released all slaves [ 436.856325][ T1040] bond5 (unregistering): Released all slaves [ 436.880156][ T1040] bond6 (unregistering): Released all slaves [ 436.905485][ T1040] bond7 (unregistering): Released all slaves [ 437.042940][ T1040] bond8 (unregistering): Released all slaves [ 437.148223][ T1040] bond9 (unregistering): Released all slaves [ 437.251149][ T1040] bond10 (unregistering): Released all slaves [ 437.408258][T17722] tipc: Enabling of bearer rejected, failed to enable media [ 437.613362][T17647] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.632386][T17647] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.647504][T17756] __nla_validate_parse: 7 callbacks suppressed [ 437.647522][T17756] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3070'. [ 437.664313][T17647] bridge_slave_0: entered allmulticast mode [ 437.666051][T17647] bridge_slave_0: entered promiscuous mode [ 437.689192][T17647] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.708688][T17647] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.723482][T17647] bridge_slave_1: entered allmulticast mode [ 437.730359][T17759] netlink: 'syz.2.3070': attribute type 7 has an invalid length. [ 437.732024][T17647] bridge_slave_1: entered promiscuous mode [ 437.747209][T17757] netlink: 'syz.3.3067': attribute type 7 has an invalid length. [ 437.764297][T17757] netlink: 'syz.3.3067': attribute type 8 has an invalid length. [ 437.921365][T17647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.964460][T17765] netlink: 'syz.4.3071': attribute type 1 has an invalid length. [ 438.006711][T17769] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 438.021158][T17765] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.031391][T17647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.122958][T17647] team0: Port device team_slave_0 added [ 438.150663][T17647] team0: Port device team_slave_1 added [ 438.192666][T17780] netlink: 'syz.4.3074': attribute type 1 has an invalid length. [ 438.228746][T17647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.240961][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.267521][T17647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.301580][T17780] 8021q: adding VLAN 0 to HW filter on device bond3 [ 438.314507][ T5867] Bluetooth: hci2: command tx timeout [ 438.332882][T17647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.340862][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.367557][T17647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.473499][T17786] tipc: Enabling of bearer rejected, failed to enable media [ 438.521502][T17647] hsr_slave_0: entered promiscuous mode [ 438.532972][T17647] hsr_slave_1: entered promiscuous mode [ 438.542110][T17647] debugfs: 'hsr0' already exists in 'hsr' [ 438.552131][T17647] Cannot create hsr debugfs directory [ 438.989858][T17814] netlink: 'syz.0.3084': attribute type 1 has an invalid length. [ 439.146324][T17825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3084'. [ 439.242380][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3085'. [ 439.279930][T17826] nbd2: detected capacity change from 0 to 63 [ 439.288002][T17823] bond13: (slave veth13): Enslaving as an active interface with a down link [ 439.300073][ T1040] : left promiscuous mode [ 439.336698][T17825] 8021q: adding VLAN 0 to HW filter on device bond13 [ 439.371032][T17829] netlink: 'syz.3.3086': attribute type 16 has an invalid length. [ 439.380358][T17826] batman_adv: batadv0: Adding interface: ip6gretap1 [ 439.387142][T17826] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.400756][T17829] netlink: 'syz.3.3086': attribute type 17 has an invalid length. [ 439.418990][T17826] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 439.440037][T17818] wg1 speed is unknown, defaulting to 1000 [ 439.466739][ T1040] tipc: Disabling bearer [ 439.484114][ T1040] tipc: Left network mode [ 439.505787][ T5867] block nbd2: Receive control failed (result -104) [ 439.526116][T17829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 439.557993][ T1040] IPVS: stopping backup sync thread 11653 ... [ 439.639539][T17818] lo speed is unknown, defaulting to 1000 [ 439.657741][T17841] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 439.820512][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3091'. [ 440.103695][T17845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3090'. [ 440.237900][T17856] tipc: Enabling of bearer rejected, failed to enable media [ 440.253505][T17853] syzkaller0: entered promiscuous mode [ 440.271817][T17853] syzkaller0: entered allmulticast mode [ 440.290446][T17647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 440.308399][T17647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 440.404741][ T5867] Bluetooth: hci2: command tx timeout [ 440.495764][T17647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 440.631775][T17647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 440.738825][ T1040] vlan0: left promiscuous mode [ 440.757197][ T1040] veth0_macvtap: left promiscuous mode [ 440.788194][ T1040] veth1_vlan: left promiscuous mode [ 440.801398][ T1040] veth0_vlan: left promiscuous mode [ 442.202686][T17647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.291842][T17647] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.375857][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.383021][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.407514][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.414710][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.470831][ T1040] IPVS: stop unused estimator thread 0... [ 442.478589][ T5867] Bluetooth: hci2: command tx timeout [ 443.252753][T17647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.357381][T17647] veth0_vlan: entered promiscuous mode [ 443.401748][T17647] veth1_vlan: entered promiscuous mode [ 443.477476][T17647] veth0_macvtap: entered promiscuous mode [ 443.499328][T17647] veth1_macvtap: entered promiscuous mode [ 443.567296][T17647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.610036][T17948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3109'. [ 443.642611][T17950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3111'. [ 443.686576][T17647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.743326][T17952] netlink: 'syz.3.3111': attribute type 7 has an invalid length. [ 443.752340][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.767338][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.796488][T17952] FAULT_INJECTION: forcing a failure. [ 443.796488][T17952] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 443.818584][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.828607][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.828772][T17951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3109'. [ 443.864287][T17952] CPU: 1 UID: 0 PID: 17952 Comm: syz.3.3111 Not tainted syzkaller #0 PREEMPT(full) [ 443.864313][T17952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 443.864323][T17952] Call Trace: [ 443.864331][T17952] [ 443.864339][T17952] dump_stack_lvl+0x189/0x250 [ 443.864366][T17952] ? __pfx____ratelimit+0x10/0x10 [ 443.864385][T17952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.864404][T17952] ? __pfx__printk+0x10/0x10 [ 443.864428][T17952] ? fs_reclaim_acquire+0x7d/0x100 [ 443.864454][T17952] should_fail_ex+0x414/0x560 [ 443.864481][T17952] prepare_alloc_pages+0x213/0x610 [ 443.864506][T17952] __alloc_frozen_pages_noprof+0x123/0x370 [ 443.864528][T17952] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 443.864556][T17952] ? policy_nodemask+0x27c/0x720 [ 443.864584][T17952] alloc_pages_mpol+0x232/0x4a0 [ 443.864612][T17952] vma_alloc_folio_noprof+0xe4/0x200 [ 443.864638][T17952] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 443.864672][T17952] folio_prealloc+0x30/0x180 [ 443.864697][T17952] do_wp_page+0x1231/0x5800 [ 443.864739][T17952] ? __pfx_do_wp_page+0x10/0x10 [ 443.864755][T17952] ? do_raw_spin_lock+0x121/0x290 [ 443.864778][T17952] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 443.864808][T17952] __handle_mm_fault+0x1033/0x5440 [ 443.864847][T17952] ? __pfx___handle_mm_fault+0x10/0x10 [ 443.864891][T17952] ? find_vma+0xe7/0x160 [ 443.864911][T17952] ? __pfx_find_vma+0x10/0x10 [ 443.864934][T17952] handle_mm_fault+0x40a/0x8e0 [ 443.864967][T17952] do_user_addr_fault+0x764/0x1390 [ 443.865006][T17952] exc_page_fault+0x76/0xf0 [ 443.865027][T17952] asm_exc_page_fault+0x26/0x30 [ 443.865043][T17952] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 443.865063][T17952] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c1 44 03 00 90 90 90 90 90 90 90 90 90 90 [ 443.865077][T17952] RSP: 0018:ffffc9001a1878b8 EFLAGS: 00050206 [ 443.865094][T17952] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 00002000000051b0 [ 443.865105][T17952] RDX: ffff888051fd8000 RSI: 000000000000a000 RDI: 00000000ffffffff [ 443.865117][T17952] RBP: ffffc9001a187a30 R08: ffffffff8fa38f37 R09: 1ffffffff1f471e6 [ 443.865130][T17952] R10: dffffc0000000000 R11: fffffbfff1f471e7 R12: 000000000000a000 [ 443.865142][T17952] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000200000005180 [ 443.865173][T17952] ____sys_recvmsg+0x2ab/0x460 [ 443.865204][T17952] ? __pfx_____sys_recvmsg+0x10/0x10 [ 443.865241][T17952] ? import_iovec+0x74/0xa0 [ 443.865272][T17952] ___sys_recvmsg+0x1b5/0x510 [ 443.865298][T17952] ? __pfx____sys_recvmsg+0x10/0x10 [ 443.865348][T17952] ? __fget_files+0x3a0/0x420 [ 443.865376][T17952] do_recvmmsg+0x307/0x770 [ 443.865406][T17952] ? __pfx_do_recvmmsg+0x10/0x10 [ 443.865440][T17952] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 443.865479][T17952] __x64_sys_recvmmsg+0x190/0x240 [ 443.865503][T17952] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 443.865520][T17952] ? rcu_is_watching+0x15/0xb0 [ 443.865543][T17952] ? do_syscall_64+0xbe/0x3b0 [ 443.865565][T17952] do_syscall_64+0xfa/0x3b0 [ 443.865582][T17952] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.865599][T17952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.865615][T17952] ? clear_bhb_loop+0x60/0xb0 [ 443.865635][T17952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.865651][T17952] RIP: 0033:0x7fa91c18eba9 [ 443.865667][T17952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.865680][T17952] RSP: 002b:00007fa91d075038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 443.865697][T17952] RAX: ffffffffffffffda RBX: 00007fa91c3d6090 RCX: 00007fa91c18eba9 [ 443.865709][T17952] RDX: 0400000000000166 RSI: 0000200000005180 RDI: 0000000000000009 [ 443.865721][T17952] RBP: 00007fa91d075090 R08: 0000000000000000 R09: 0000000000000000 [ 443.865732][T17952] R10: 000000000001a000 R11: 0000000000000246 R12: 0000000000000001 [ 443.865743][T17952] R13: 00007fa91c3d6128 R14: 00007fa91c3d6090 R15: 00007fff00882468 [ 443.865774][T17952] [ 444.587311][ T3583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.626403][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3114'. [ 444.659434][ T3583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.772465][ T3583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.783061][T17970] syzkaller1: entered promiscuous mode [ 444.788841][ T3583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.796976][T17970] syzkaller1: entered allmulticast mode [ 445.082942][T17987] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3118'. [ 445.162012][T17989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3119'. [ 445.309724][T17993] netlink: 'syz.1.3119': attribute type 7 has an invalid length. [ 445.391261][T17995] netlink: 'syz.4.3118': attribute type 11 has an invalid length. [ 446.194528][T18003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3123'. [ 446.237599][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 446.246775][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 446.255125][T18004] wg1 speed is unknown, defaulting to 1000 [ 446.265589][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 446.277621][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 446.288611][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 446.481758][T18007] wg1 speed is unknown, defaulting to 1000 [ 446.585528][T18022] syzkaller0: entered promiscuous mode [ 446.591004][T18022] syzkaller0: entered allmulticast mode [ 446.630718][T18024] hsr0: entered promiscuous mode [ 446.636831][T18024] macvlan2: entered allmulticast mode [ 446.642240][T18024] hsr0: entered allmulticast mode [ 446.647506][T18024] hsr_slave_0: entered allmulticast mode [ 446.653133][T18024] hsr_slave_1: entered allmulticast mode [ 446.661959][T18024] hsr0: left allmulticast mode [ 446.668666][T18024] hsr_slave_0: left allmulticast mode [ 446.676274][T18024] hsr_slave_1: left allmulticast mode [ 448.324499][ T5867] Bluetooth: hci0: command tx timeout [ 448.423187][T18033] wg1 speed is unknown, defaulting to 1000 [ 448.699536][T18007] chnl_net:caif_netlink_parms(): no params data found [ 448.871817][T18007] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.880959][T18007] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.889421][T18007] bridge_slave_0: entered allmulticast mode [ 448.898053][T18007] bridge_slave_0: entered promiscuous mode [ 448.936684][T18007] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.947945][T18007] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.961442][T18007] bridge_slave_1: entered allmulticast mode [ 448.979916][T18007] bridge_slave_1: entered promiscuous mode [ 449.069780][T18068] pim6reg99999999: entered allmulticast mode [ 449.093489][T18007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.142643][T18007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.145783][T18077] netlink: 'syz.1.3142': attribute type 23 has an invalid length. [ 449.157770][T18075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3141'. [ 449.267734][T18007] team0: Port device team_slave_0 added [ 449.330455][T18007] team0: Port device team_slave_1 added [ 449.419850][T18087] wg1 speed is unknown, defaulting to 1000 [ 449.436296][T18088] vlan4: entered promiscuous mode [ 449.441360][T18088] dummy0: entered promiscuous mode [ 449.473281][T18099] netlink: 'syz.4.3146': attribute type 1 has an invalid length. [ 449.481088][T18099] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3146'. [ 449.524514][T18007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.531634][T18007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.557995][T18007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.590201][T18101] geneve4: entered promiscuous mode [ 449.617240][T18007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.626488][T18007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.652961][T18007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.672919][ T3583] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 449.685402][ T3583] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 450.052852][ T3583] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 450.075053][ T3583] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 450.403306][ T5867] Bluetooth: hci0: command tx timeout [ 451.453700][T18127] netlink: 'syz.2.3153': attribute type 3 has an invalid length. [ 451.462928][T18127] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3153'. [ 451.502461][ T7720] IPVS: starting estimator thread 0... [ 451.618857][T18129] IPVS: using max 30 ests per chain, 72000 per kthread [ 452.402833][T18007] hsr_slave_0: entered promiscuous mode [ 452.420217][T18007] hsr_slave_1: entered promiscuous mode [ 452.441851][T18007] debugfs: 'hsr0' already exists in 'hsr' [ 452.448243][T18007] Cannot create hsr debugfs directory [ 452.485064][ T5867] Bluetooth: hci0: command tx timeout [ 452.548541][T18128] tipc: Started in network mode [ 452.553462][T18128] tipc: Node identity fe86809038b7, cluster identity 4711 [ 452.569369][T18128] tipc: Enabled bearer , priority 0 [ 452.616164][T18123] syzkaller0: entered promiscuous mode [ 452.621888][T18123] syzkaller0: entered allmulticast mode [ 452.661351][T18134] tipc: Resetting bearer [ 452.741012][T18124] tipc: Resetting bearer [ 452.770998][T18124] tipc: Disabling bearer [ 452.797947][T18119] wg1 speed is unknown, defaulting to 1000 [ 452.899609][T18154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3158'. [ 452.922841][T18154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3158'. [ 452.961476][T18148] wg1 speed is unknown, defaulting to 1000 [ 453.079888][T18163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3160'. [ 453.470954][T18178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3164'. [ 453.499131][T18178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3164'. [ 453.578725][T18183] tipc: Enabled bearer , priority 0 [ 453.631392][T18176] syzkaller0: entered promiscuous mode [ 453.654190][T18176] syzkaller0: entered allmulticast mode [ 453.729322][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3162'. [ 453.799542][T18176] tipc: Resetting bearer [ 453.819770][T18176] netlink: 'syz.2.3162': attribute type 10 has an invalid length. [ 453.856415][T18192] wg1 speed is unknown, defaulting to 1000 [ 453.876747][T18176] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 453.929204][T18175] tipc: Resetting bearer [ 453.973151][T18175] tipc: Disabling bearer [ 454.276396][T18199] macvlan2: entered allmulticast mode [ 454.281810][T18199] bond0: entered allmulticast mode [ 454.287258][T18199] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 454.300142][T18199] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 454.338739][T18199] bond0: left allmulticast mode [ 454.343642][T18199] mac80211_hwsim hwsim39 wlan1: left allmulticast mode [ 454.564427][ T5867] Bluetooth: hci0: command tx timeout [ 454.621681][T18007] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 454.658794][T18007] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 454.678905][T18007] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 454.690484][T18007] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 455.007156][T18225] syzkaller0: entered promiscuous mode [ 455.012887][T18225] syzkaller0: entered allmulticast mode [ 455.236922][T18222] wg1 speed is unknown, defaulting to 1000 [ 455.423771][T18237] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 455.573106][T18007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.615909][T18242] netlink: 'syz.1.3176': attribute type 1 has an invalid length. [ 455.644488][T18242] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3176'. [ 455.716242][T18007] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.766967][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.774219][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.794865][T18244] nbd0: detected capacity change from 0 to 127 [ 455.808792][T17836] block nbd0: Send control failed (result -32) [ 455.813059][ T5867] block nbd0: Receive control failed (result -32) [ 455.828643][T17836] block nbd0: Request send failed, requeueing [ 455.839679][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.846856][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.861624][T17836] block nbd0: Dead connection, failed to find a fallback [ 455.872969][ T94] block nbd0: Dead connection, failed to find a fallback [ 455.932330][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3179'. [ 456.007429][T18252] wg1 speed is unknown, defaulting to 1000 [ 456.073556][T18259] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3181'. [ 456.076313][T18256] veth4: entered promiscuous mode [ 456.095852][T18256] veth4: entered allmulticast mode [ 456.141457][T18007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.378424][T18268] netlink: 'syz.4.3182': attribute type 4 has an invalid length. [ 456.429984][T18271] netlink: 'syz.4.3182': attribute type 4 has an invalid length. [ 456.607280][T18007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.618605][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3184'. [ 456.655176][T18279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3185'. [ 456.679623][T18279] IPv6: sit1: Disabled Multicast RS [ 456.691959][T18279] sit1: entered allmulticast mode [ 456.848443][T18283] wg1 speed is unknown, defaulting to 1000 [ 457.020318][T18007] veth0_vlan: entered promiscuous mode [ 457.045940][T18288] wg1 speed is unknown, defaulting to 1000 [ 457.053418][T18007] veth1_vlan: entered promiscuous mode [ 457.109124][T18290] wg1 speed is unknown, defaulting to 1000 [ 457.347088][T18296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3189'. [ 457.391413][T18007] veth0_macvtap: entered promiscuous mode [ 457.418305][T18296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3189'. [ 457.629699][T18007] veth1_macvtap: entered promiscuous mode [ 457.799506][T18007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.852065][T18318] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3195'. [ 457.885688][T18007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.915549][ T5867] Bluetooth: hci0: command 0x0405 tx timeout [ 457.983214][T18323] netlink: 'syz.2.3196': attribute type 1 has an invalid length. [ 458.024760][T18323] netlink: 'syz.2.3196': attribute type 8 has an invalid length. [ 458.053264][T18323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3196'. [ 458.165086][ T6947] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.185830][T18334] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3198'. [ 458.251556][ T6947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.290016][ T6947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.302105][ T6947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.705448][ T6947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.729942][ T6947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.790870][ T6950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.803562][ T6950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.833360][T18344] wg1 speed is unknown, defaulting to 1000 [ 459.268042][T18364] netlink: 'syz.0.3206': attribute type 1 has an invalid length. [ 459.505122][T18370] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.879625][T18381] veth0: entered promiscuous mode [ 459.898138][T18379] veth0: left promiscuous mode [ 459.933307][T18383] Bluetooth: MGMT ver 1.23 [ 459.995047][ T5867] Bluetooth: hci0: command 0x0405 tx timeout [ 460.044593][T18380] wg1 speed is unknown, defaulting to 1000 [ 460.215872][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 460.245794][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 460.257869][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 460.270301][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 460.278221][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.280673][T18399] netlink: 'syz.1.3217': attribute type 1 has an invalid length. [ 460.310669][T18391] pimreg: entered allmulticast mode [ 460.344620][T18377] wg1 speed is unknown, defaulting to 1000 [ 460.374630][T18389] dvmrp8: entered allmulticast mode [ 460.380191][T18389] pimreg: left allmulticast mode [ 460.387436][T18389] dvmrp8: left allmulticast mode [ 460.621604][T18394] wg1 speed is unknown, defaulting to 1000 [ 460.901979][T18415] wg1 speed is unknown, defaulting to 1000 [ 461.117200][T18419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.235178][T18418] wg1 speed is unknown, defaulting to 1000 [ 461.346225][T18422] netlink: 'syz.2.3222': attribute type 11 has an invalid length. [ 461.368022][T18422] __nla_validate_parse: 4 callbacks suppressed [ 461.368038][T18422] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3222'. [ 461.622103][T18434] vxcan1 speed is unknown, defaulting to 1000 [ 461.653655][T18426] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535 [ 461.668814][T18434] vxcan1 speed is unknown, defaulting to 1000 [ 461.725153][T18434] vxcan1 speed is unknown, defaulting to 1000 [ 461.744680][T18437] tap0: tun_chr_ioctl cmd 1074025678 [ 461.767599][T18437] tap0: group set to 0 [ 461.805273][T18394] chnl_net:caif_netlink_parms(): no params data found [ 462.135805][T18434] infiniband syz2: set active [ 462.140621][T18434] infiniband syz2: added vxcan1 [ 462.160640][ T7725] vxcan1 speed is unknown, defaulting to 1000 [ 462.203199][T18434] RDS/IB: syz2: added [ 462.207740][T18434] smc: adding ib device syz2 with port count 1 [ 462.214375][T18434] smc: ib device syz2 port 1 has no pnetid [ 462.255247][T15755] vxcan1 speed is unknown, defaulting to 1000 [ 462.334396][T18434] vxcan1 speed is unknown, defaulting to 1000 [ 462.397720][ T5868] Bluetooth: hci1: command tx timeout [ 462.426767][T18394] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.474430][T18394] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.514336][T18394] bridge_slave_0: entered allmulticast mode [ 462.552006][T18394] bridge_slave_0: entered promiscuous mode [ 462.572621][T18394] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.583898][T18394] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.592665][T18394] bridge_slave_1: entered allmulticast mode [ 462.608302][T18394] bridge_slave_1: entered promiscuous mode [ 462.825063][T18434] vxcan1 speed is unknown, defaulting to 1000 [ 462.852697][T18394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.877173][T18394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.945419][T18463] netlink: 'syz.4.3228': attribute type 1 has an invalid length. [ 462.953186][T18463] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3228'. [ 463.350906][T18394] team0: Port device team_slave_0 added [ 463.376572][T18394] team0: Port device team_slave_1 added [ 463.452904][T18434] vxcan1 speed is unknown, defaulting to 1000 [ 463.537706][T18394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.564985][T18394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.599153][T18394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.626492][T18394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.654503][T18394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.704107][T18394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.788536][T18491] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3236'. [ 463.840403][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 463.927058][T18394] hsr_slave_0: entered promiscuous mode [ 463.938617][T18394] hsr_slave_1: entered promiscuous mode [ 463.945202][T18394] debugfs: 'hsr0' already exists in 'hsr' [ 463.951514][T18394] Cannot create hsr debugfs directory [ 463.978202][T18434] vxcan1 speed is unknown, defaulting to 1000 [ 464.061898][T18496] syzkaller0: entered promiscuous mode [ 464.074340][T18496] syzkaller0: entered allmulticast mode [ 464.310751][T18507] netlink: 'syz.2.3240': attribute type 1 has an invalid length. [ 464.319188][T18507] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3240'. [ 464.477647][ T5868] Bluetooth: hci1: command tx timeout [ 464.478797][T18434] vxcan1 speed is unknown, defaulting to 1000 [ 464.533483][T18394] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 464.650561][T18394] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 464.736318][T18394] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 464.762916][T18516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3243'. [ 464.810673][T18516] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 464.852279][T18394] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 464.882685][T18518] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 464.885018][T18516] netlink: 'syz.2.3243': attribute type 10 has an invalid length. [ 464.907537][T18434] vxcan1 speed is unknown, defaulting to 1000 [ 464.952116][T18516] mac80211_hwsim hwsim39 wlan1: left allmulticast mode [ 465.162423][T18394] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 465.175414][T18394] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 465.200883][T18523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3245'. [ 465.202638][T18394] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 465.246017][T18394] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 465.259380][T18524] netlink: 'syz.2.3245': attribute type 10 has an invalid length. [ 465.311821][T18524] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 465.328548][T18434] vxcan1 speed is unknown, defaulting to 1000 [ 465.496391][T18394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.538700][T18394] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.561871][ T9213] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.569062][ T9213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.610160][ T9213] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.617332][ T9213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.669560][T18434] vxcan1 speed is unknown, defaulting to 1000 [ 465.949311][T18394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.039728][T18394] veth0_vlan: entered promiscuous mode [ 466.073161][T18394] veth1_vlan: entered promiscuous mode [ 466.098382][T18537] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3246'. [ 466.126368][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3247'. [ 466.191817][T18394] veth0_macvtap: entered promiscuous mode [ 466.240630][T18394] veth1_macvtap: entered promiscuous mode [ 466.265392][T18434] vxcan1 speed is unknown, defaulting to 1000 [ 466.283044][T18394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.306299][T18546] FAULT_INJECTION: forcing a failure. [ 466.306299][T18546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.332293][T18546] CPU: 0 UID: 0 PID: 18546 Comm: syz.2.3248 Not tainted syzkaller #0 PREEMPT(full) [ 466.332319][T18546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 466.332329][T18546] Call Trace: [ 466.332336][T18546] [ 466.332343][T18546] dump_stack_lvl+0x189/0x250 [ 466.332366][T18546] ? __pfx____ratelimit+0x10/0x10 [ 466.332385][T18546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.332404][T18546] ? __pfx__printk+0x10/0x10 [ 466.332426][T18546] ? __might_fault+0xb0/0x130 [ 466.332453][T18546] should_fail_ex+0x414/0x560 [ 466.332480][T18546] _copy_from_iter+0x1de/0x1790 [ 466.332504][T18546] ? rcu_is_watching+0x15/0xb0 [ 466.332522][T18546] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 466.332545][T18546] ? __pfx__copy_from_iter+0x10/0x10 [ 466.332565][T18546] ? __build_skb_around+0x257/0x3e0 [ 466.332585][T18546] ? netlink_sendmsg+0x642/0xb30 [ 466.332600][T18546] ? skb_put+0x11b/0x210 [ 466.332619][T18546] netlink_sendmsg+0x6b2/0xb30 [ 466.332645][T18546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.332664][T18546] ? aa_sock_msg_perm+0xf1/0x1d0 [ 466.332682][T18546] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.332700][T18546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.332718][T18546] __sock_sendmsg+0x21c/0x270 [ 466.332743][T18546] ____sys_sendmsg+0x505/0x830 [ 466.332786][T18546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.332815][T18546] ? import_iovec+0x74/0xa0 [ 466.332837][T18546] ___sys_sendmsg+0x21f/0x2a0 [ 466.332858][T18546] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.332914][T18546] ? __fget_files+0x2a/0x420 [ 466.332927][T18546] ? __fget_files+0x3a0/0x420 [ 466.332952][T18546] __x64_sys_sendmsg+0x19b/0x260 [ 466.332973][T18546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.332996][T18546] ? __pfx_ksys_write+0x10/0x10 [ 466.333012][T18546] ? rcu_is_watching+0x15/0xb0 [ 466.333041][T18546] ? do_syscall_64+0xbe/0x3b0 [ 466.333062][T18546] do_syscall_64+0xfa/0x3b0 [ 466.333078][T18546] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.333095][T18546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.333109][T18546] ? clear_bhb_loop+0x60/0xb0 [ 466.333127][T18546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.333140][T18546] RIP: 0033:0x7f19daf8eba9 [ 466.333154][T18546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.333166][T18546] RSP: 002b:00007f19dbeff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.333180][T18546] RAX: ffffffffffffffda RBX: 00007f19db1d5fa0 RCX: 00007f19daf8eba9 [ 466.333189][T18546] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 466.333196][T18546] RBP: 00007f19dbeff090 R08: 0000000000000000 R09: 0000000000000000 [ 466.333204][T18546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.333213][T18546] R13: 00007f19db1d6038 R14: 00007f19db1d5fa0 R15: 00007fff3aa3e978 [ 466.333241][T18546] [ 466.339012][T18545] erspan0: entered promiscuous mode [ 466.628980][ T5868] Bluetooth: hci1: command tx timeout [ 466.640612][T18545] erspan0: left promiscuous mode [ 466.682000][T18394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.702182][T18547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3249'. [ 466.747559][ T6945] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.797111][ T6945] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.851072][ T6945] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.869958][ T6945] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.891305][T18555] netlink: 'syz.1.3251': attribute type 1 has an invalid length. [ 466.899435][T18555] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3251'. [ 466.908639][T18434] vxcan1 speed is unknown, defaulting to 1000 [ 467.012579][ T9213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.036693][ T9213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.106969][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.116253][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.238683][T18560] syzkaller0: entered promiscuous mode [ 467.257267][T18560] syzkaller0: entered allmulticast mode [ 467.348767][T18434] vxcan1 speed is unknown, defaulting to 1000 [ 467.537046][T18566] netlink: 'syz.3.3254': attribute type 1 has an invalid length. [ 467.564066][T18566] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3254'. [ 467.573037][T18566] netlink: 105 bytes leftover after parsing attributes in process `syz.3.3254'. [ 467.683172][T18478] wg1 speed is unknown, defaulting to 1000 [ 467.721181][T18552] wg1 speed is unknown, defaulting to 1000 [ 468.326263][T18572] wg1 speed is unknown, defaulting to 1000 [ 468.439741][T18572] vxcan1 speed is unknown, defaulting to 1000 [ 468.716793][ T5868] Bluetooth: hci1: command tx timeout [ 469.291424][T18589] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3258'. [ 469.379714][ T55] block nbd2: Possible stuck request ffff8880250d7000: control (read@0,1024B). Runtime 30 seconds [ 469.392154][ T55] block nbd2: Possible stuck request ffff8880250d71c0: control (read@1024,1024B). Runtime 30 seconds [ 469.414196][ T55] block nbd2: Possible stuck request ffff8880250d7380: control (read@2048,1024B). Runtime 30 seconds [ 469.425169][ T55] block nbd2: Possible stuck request ffff8880250d7540: control (read@3072,1024B). Runtime 30 seconds [ 470.080183][T18601] netlink: 'syz.0.3261': attribute type 1 has an invalid length. [ 470.099642][T18601] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3261'. [ 470.640290][T18613] bond1: entered promiscuous mode [ 470.651469][T18613] bond1: entered allmulticast mode [ 470.657151][T18613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.775455][T18613] bond1 (unregistering): Released all slaves [ 470.983102][T18633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3267'. [ 471.134400][T18642] netlink: 'syz.0.3272': attribute type 1 has an invalid length. [ 471.143385][T18642] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3272'. [ 471.253142][T18645] 8021q: VLANs not supported on caif0 [ 471.543927][T18657] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 471.937474][T18663] tipc: Enabled bearer , priority 0 [ 471.956395][T18663] syzkaller0: entered promiscuous mode [ 471.961893][T18663] syzkaller0: entered allmulticast mode [ 472.017082][T18663] tipc: Resetting bearer [ 472.141190][T18670] wg1 speed is unknown, defaulting to 1000 [ 472.206785][T18670] vxcan1 speed is unknown, defaulting to 1000 [ 472.276136][T18662] tipc: Resetting bearer [ 472.343795][T18662] tipc: Disabling bearer [ 473.115339][T18683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3281'. [ 473.223708][T18693] netlink: 'syz.4.3284': attribute type 1 has an invalid length. [ 473.240189][T18693] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3284'. [ 473.371941][T18695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3285'. [ 473.417449][T18695] bridge_slave_1: left allmulticast mode [ 473.430195][T18704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3287'. [ 473.439964][T18695] bridge_slave_1: left promiscuous mode [ 473.453669][T18695] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.470836][T18695] bridge_slave_0: left allmulticast mode [ 473.484281][T18695] bridge_slave_0: left promiscuous mode [ 473.490145][T18695] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.600979][T18704] vlan2: entered promiscuous mode [ 473.606368][T18704] gretap0: entered promiscuous mode [ 473.749303][T18711] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3289'. [ 473.798623][T18714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.836433][T18717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.920705][T18723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3292'. [ 473.992838][T18727] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3293'. [ 474.623661][T18715] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 474.686467][T18731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3294'. [ 475.838500][ T5867] Bluetooth: hci0: command 0x0405 tx timeout [ 476.059281][T18733] wg1 speed is unknown, defaulting to 1000 [ 476.133096][T18742] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3298'. [ 476.133160][T18733] vxcan1 speed is unknown, defaulting to 1000 [ 476.149368][T18738] syzkaller0: create flow: hash 552600558 index 1 [ 476.155583][T18740] netlink: 'syz.0.3297': attribute type 1 has an invalid length. [ 476.160516][ T13] syzkaller0: tun_net_xmit 76 [ 476.172385][T18740] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3297'. [ 476.175926][ T13] syzkaller0: tun_net_xmit 48 [ 476.186816][T15755] syzkaller0: tun_net_xmit 76 [ 476.404194][T18746] syzkaller0: delete flow: hash 552600558 index 1 [ 476.668838][T18759] netlink: 'syz.0.3302': attribute type 10 has an invalid length. [ 476.741559][T18763] netlink: 'syz.0.3302': attribute type 10 has an invalid length. [ 476.856939][T18768] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 478.399729][T18759] team0: Port device dummy0 added [ 478.424202][T18763] team0: Port device dummy0 removed [ 478.431946][T18763] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 478.464920][T18765] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 478.607240][T18771] bond0: (slave dummy0): Releasing backup interface [ 478.629579][T18778] __nla_validate_parse: 1 callbacks suppressed [ 478.629596][T18778] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3308'. [ 478.680368][T18771] bridge_slave_0: left allmulticast mode [ 478.687360][T18781] netlink: 'syz.3.3310': attribute type 1 has an invalid length. [ 478.703812][T18771] bridge_slave_0: left promiscuous mode [ 478.711516][T18781] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3310'. [ 478.731925][T18771] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.800732][T18788] netlink: 'syz.4.3308': attribute type 7 has an invalid length. [ 478.831655][T18771] bridge_slave_1: left allmulticast mode [ 478.837484][T18771] bridge_slave_1: left promiscuous mode [ 478.843370][T18771] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.909923][T18771] bond0: (slave bond_slave_0): Releasing backup interface [ 478.923392][T18771] bond0: (slave bond_slave_1): Releasing backup interface [ 478.941647][T18771] team0: Port device team_slave_0 removed [ 478.957745][T18771] team0: Port device team_slave_1 removed [ 478.964891][T18771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.972405][T18771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.983657][T18771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.991816][T18771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.009031][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3313'. [ 479.021651][T18771] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 479.044914][ T7720] vxcan1 speed is unknown, defaulting to 1000 [ 479.086595][T18787] team0: Mode changed to "loadbalance" [ 479.767606][T18804] syzkaller0: entered promiscuous mode [ 479.773120][T18804] syzkaller0: entered allmulticast mode [ 479.820473][T18813] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 479.845757][T18813] netdevsim netdevsim3 netdevsim0: refused to change device tx_queue_len [ 479.901326][T18815] ªªªªªª: renamed from wg2 (while UP) [ 480.300635][T18825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3320'. [ 480.329516][T18829] netlink: 'syz.3.3322': attribute type 1 has an invalid length. [ 480.345244][T18829] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3322'. [ 480.361062][T18784] infiniband syz!: set active [ 480.385034][T18784] infiniband syz!: added team_slave_0 [ 480.394971][T18784] syz!: rxe_create_cq: returned err = -12 [ 480.408026][T18784] infiniband syz!: Couldn't create ib_mad CQ [ 480.425389][T18784] infiniband syz!: Couldn't open port 1 [ 480.511608][T18834] netlink: 'syz.2.3323': attribute type 1 has an invalid length. [ 480.525326][T18784] RDS/IB: syz!: added [ 480.529381][T18784] smc: adding ib device syz! with port count 1 [ 480.549053][T18834] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3323'. [ 480.554694][T18784] smc: ib device syz! port 1 has no pnetid [ 480.567419][T18834] netlink: 105 bytes leftover after parsing attributes in process `syz.2.3323'. [ 480.628882][T15755] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0 [ 480.644705][T15755] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0 [ 480.665438][T15755] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 481.738032][T18872] syzkaller0: entered promiscuous mode [ 481.743584][T18872] syzkaller0: entered allmulticast mode [ 482.093718][T18880] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3333'. [ 482.266943][T18884] netlink: 'syz.2.3335': attribute type 1 has an invalid length. [ 482.284392][T18884] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3335'. [ 482.325472][T18887] netlink: 'syz.4.3336': attribute type 1 has an invalid length. [ 482.333412][T18887] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3336'. [ 482.726089][T18902] netlink: 'syz.2.3341': attribute type 1 has an invalid length. [ 482.877811][T18902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.934714][T18907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.972351][T18907] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 482.988144][T18907] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 483.282651][T18915] syzkaller0: entered promiscuous mode [ 483.290110][T18915] syzkaller0: entered allmulticast mode [ 483.628878][T18930] syzkaller0: entered promiscuous mode [ 483.651390][T18930] syzkaller0: entered allmulticast mode [ 483.680790][T18922] wg1 speed is unknown, defaulting to 1000 [ 483.770269][T18935] netlink: 'syz.0.3349': attribute type 1 has an invalid length. [ 483.805080][T18935] __nla_validate_parse: 2 callbacks suppressed [ 483.805098][T18935] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3349'. [ 483.867556][T18922] vxcan1 speed is unknown, defaulting to 1000 [ 483.997946][T18941] netlink: 468 bytes leftover after parsing attributes in process `syz.3.3352'. [ 484.194342][T18946] netlink: 'syz.4.3354': attribute type 1 has an invalid length. [ 484.244805][T18946] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3354'. [ 484.255072][T18953] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3353'. [ 484.276974][T18946] netlink: 105 bytes leftover after parsing attributes in process `syz.4.3354'. [ 484.311738][T18951] tipc: Started in network mode [ 484.328527][T18951] tipc: Node identity , cluster identity 4711 [ 484.350739][T18951] tipc: Failed to obtain node identity [ 484.401938][T18951] tipc: Enabling of bearer rejected, failed to enable media [ 484.457379][T18954] syzkaller0: entered promiscuous mode [ 484.462997][T18954] syzkaller0: entered allmulticast mode [ 484.585341][T18959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'. [ 485.091485][T18948] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 485.117627][T18965] syzkaller0: entered promiscuous mode [ 485.143517][T18965] syzkaller0: entered allmulticast mode [ 485.284593][T18973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3360'. [ 485.429374][T18975] netlink: 'syz.1.3361': attribute type 1 has an invalid length. [ 485.439906][T18977] delete_channel: no stack [ 485.478585][T18975] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3361'. [ 485.587964][T18987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3365'. [ 485.609389][T18985] syzkaller0: entered promiscuous mode [ 485.618743][T18987] netlink: 'syz.3.3365': attribute type 2 has an invalid length. [ 485.622518][T18985] syzkaller0: entered allmulticast mode [ 485.648172][T18989] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3366'. [ 485.775159][T18991] netlink: 'syz.3.3365': attribute type 11 has an invalid length. [ 486.142790][T19003] syzkaller0: entered promiscuous mode [ 486.159911][T19003] syzkaller0: entered allmulticast mode [ 486.447808][T19021] netlink: 'syz.3.3376': attribute type 1 has an invalid length. [ 486.928785][T19041] syzkaller0: entered promiscuous mode [ 486.960316][T19041] syzkaller0: entered allmulticast mode [ 487.094634][T19045] tipc: Enabled bearer , priority 0 [ 487.118610][T19048] syzkaller0: entered promiscuous mode [ 487.139825][T19048] syzkaller0: entered allmulticast mode [ 487.231578][T19045] netlink: 'syz.2.3384': attribute type 1 has an invalid length. [ 487.252817][T19051] syzkaller0: entered promiscuous mode [ 487.259322][T19051] syzkaller0: entered allmulticast mode [ 487.298377][T19044] tipc: Resetting bearer [ 487.358360][T19044] tipc: Disabling bearer [ 487.436445][T19063] netlink: 'syz.4.3388': attribute type 1 has an invalid length. [ 487.452427][T19062] syzkaller0: entered promiscuous mode [ 487.459881][T19062] syzkaller0: entered allmulticast mode [ 487.609589][T19070] netlink: 'syz.4.3390': attribute type 13 has an invalid length. [ 487.625167][T19070] bpq0: entered promiscuous mode [ 487.653766][T19072] netlink: 'syz.2.3392': attribute type 13 has an invalid length. [ 488.226103][T19091] syzkaller0: entered promiscuous mode [ 488.243167][T19091] syzkaller0: entered allmulticast mode [ 488.514834][T19104] syzkaller0: entered promiscuous mode [ 488.521104][T19104] syzkaller0: entered allmulticast mode [ 489.352972][T19131] __nla_validate_parse: 10 callbacks suppressed [ 489.352990][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3411'. [ 489.372240][T19134] validate_nla: 1 callbacks suppressed [ 489.372258][T19134] netlink: 'syz.4.3412': attribute type 1 has an invalid length. [ 489.380454][T19133] wg1 speed is unknown, defaulting to 1000 [ 489.410744][T19134] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3412'. [ 489.440114][T19137] bridge1: port 1(veth3) entered blocking state [ 489.452102][T19137] bridge1: port 1(veth3) entered disabled state [ 489.471282][T19137] veth3: entered allmulticast mode [ 489.486062][T19137] veth3: entered promiscuous mode [ 489.501232][T19135] wg1 speed is unknown, defaulting to 1000 [ 489.520143][T19141] syzkaller0: entered promiscuous mode [ 489.525881][T19141] syzkaller0: entered allmulticast mode [ 489.567122][T19131] bridge1: port 2(veth0_to_bond) entered blocking state [ 489.585670][T19131] bridge1: port 2(veth0_to_bond) entered disabled state [ 489.592856][T19131] veth0_to_bond: entered allmulticast mode [ 489.631299][T19131] veth0_to_bond: entered promiscuous mode [ 489.646924][T19133] vxcan1 speed is unknown, defaulting to 1000 [ 489.677146][T19136] wg1 speed is unknown, defaulting to 1000 [ 490.190515][T19162] wg1 speed is unknown, defaulting to 1000 [ 490.414041][T19170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3421'. [ 490.427288][T19135] vxcan1 speed is unknown, defaulting to 1000 [ 490.446857][T19170] FAULT_INJECTION: forcing a failure. [ 490.446857][T19170] name failslab, interval 1, probability 0, space 0, times 0 [ 490.495645][T19170] CPU: 1 UID: 0 PID: 19170 Comm: syz.0.3421 Not tainted syzkaller #0 PREEMPT(full) [ 490.495674][T19170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 490.495685][T19170] Call Trace: [ 490.495692][T19170] [ 490.495700][T19170] dump_stack_lvl+0x189/0x250 [ 490.495726][T19170] ? __pfx____ratelimit+0x10/0x10 [ 490.495744][T19170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.495764][T19170] ? __pfx__printk+0x10/0x10 [ 490.495793][T19170] ? __pfx___might_resched+0x10/0x10 [ 490.495814][T19170] should_fail_ex+0x414/0x560 [ 490.495842][T19170] should_failslab+0xa8/0x100 [ 490.495867][T19170] __kmalloc_noprof+0xcb/0x4f0 [ 490.495887][T19170] ? nla_strdup+0x9d/0x140 [ 490.495907][T19170] nla_strdup+0x9d/0x140 [ 490.495926][T19170] nf_tables_newobj+0xba3/0x1320 [ 490.495965][T19170] ? __pfx_nf_tables_newobj+0x10/0x10 [ 490.495996][T19170] ? __nla_parse+0x40/0x60 [ 490.496017][T19170] nfnetlink_rcv+0x112f/0x2520 [ 490.496076][T19170] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 490.496151][T19170] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 490.496172][T19170] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.496207][T19170] netlink_unicast+0x82f/0x9e0 [ 490.496237][T19170] ? __pfx_netlink_unicast+0x10/0x10 [ 490.496261][T19170] ? netlink_sendmsg+0x642/0xb30 [ 490.496277][T19170] ? skb_put+0x11b/0x210 [ 490.496297][T19170] netlink_sendmsg+0x805/0xb30 [ 490.496324][T19170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.496344][T19170] ? aa_sock_msg_perm+0xf1/0x1d0 [ 490.496362][T19170] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.496378][T19170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.496396][T19170] __sock_sendmsg+0x21c/0x270 [ 490.496420][T19170] ____sys_sendmsg+0x505/0x830 [ 490.496445][T19170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.496485][T19170] ? import_iovec+0x74/0xa0 [ 490.496509][T19170] ___sys_sendmsg+0x21f/0x2a0 [ 490.496530][T19170] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.496587][T19170] ? __fget_files+0x2a/0x420 [ 490.496602][T19170] ? __fget_files+0x3a0/0x420 [ 490.496629][T19170] __x64_sys_sendmsg+0x19b/0x260 [ 490.496651][T19170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.496681][T19170] ? __pfx_ksys_write+0x10/0x10 [ 490.496699][T19170] ? rcu_is_watching+0x15/0xb0 [ 490.496721][T19170] ? do_syscall_64+0xbe/0x3b0 [ 490.496743][T19170] do_syscall_64+0xfa/0x3b0 [ 490.496760][T19170] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.496777][T19170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.496793][T19170] ? clear_bhb_loop+0x60/0xb0 [ 490.496814][T19170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.496830][T19170] RIP: 0033:0x7f340e98eba9 [ 490.496846][T19170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.496860][T19170] RSP: 002b:00007f340f836038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.496879][T19170] RAX: ffffffffffffffda RBX: 00007f340ebd5fa0 RCX: 00007f340e98eba9 [ 490.496892][T19170] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 490.496903][T19170] RBP: 00007f340f836090 R08: 0000000000000000 R09: 0000000000000000 [ 490.496914][T19170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 490.496924][T19170] R13: 00007f340ebd6038 R14: 00007f340ebd5fa0 R15: 00007ffde2bb5b78 [ 490.496955][T19170] [ 490.866520][T19172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3422'. [ 490.906069][T19175] netlink: 'syz.0.3423': attribute type 1 has an invalid length. [ 490.915251][T19175] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3423'. [ 490.933271][T19173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3422'. [ 491.151837][T19178] syzkaller0: entered promiscuous mode [ 491.184518][T19178] syzkaller0: entered allmulticast mode [ 491.404281][T19185] syzkaller0: entered promiscuous mode [ 491.409785][T19185] syzkaller0: entered allmulticast mode [ 491.677190][T19191] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3429'. [ 491.693596][T19136] vxcan1 speed is unknown, defaulting to 1000 [ 491.949528][T19197] netlink: 'syz.4.3432': attribute type 1 has an invalid length. [ 492.103302][T19197] bond4: (slave gretap1): making interface the new active one [ 492.159703][T19197] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 492.168984][T19162] vxcan1 speed is unknown, defaulting to 1000 [ 492.537932][T19204] netlink: 'syz.0.3435': attribute type 1 has an invalid length. [ 492.546314][T19204] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3435'. [ 492.734883][T19206] netlink: 'syz.4.3434': attribute type 29 has an invalid length. [ 492.749094][T19206] netlink: 'syz.4.3434': attribute type 29 has an invalid length. [ 492.775963][T19206] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3434'. [ 492.794999][T19206] unsupported nla_type 58 [ 492.849596][T19211] netlink: 'syz.0.3436': attribute type 3 has an invalid length. [ 493.315055][T19209] wg1 speed is unknown, defaulting to 1000 [ 493.770779][T19247] netlink: 'syz.0.3446': attribute type 1 has an invalid length. [ 493.799580][T19247] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3446'. [ 493.871013][T19209] vxcan1 speed is unknown, defaulting to 1000 [ 494.411653][T19268] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3452'. [ 494.421480][T19270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3452'. [ 494.745196][T19281] netlink: 'syz.1.3454': attribute type 23 has an invalid length. [ 494.971537][T19281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3454'. [ 495.029333][T19282] netlink: 'syz.1.3454': attribute type 4 has an invalid length. [ 495.037466][T19287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3455'. [ 495.077738][T19282] netlink: 'syz.1.3454': attribute type 4 has an invalid length. [ 495.701951][T19293] netlink: 'syz.1.3457': attribute type 1 has an invalid length. [ 495.710680][T19293] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3457'. [ 496.229343][T19297] wg1 speed is unknown, defaulting to 1000 [ 496.307140][T19297] vxcan1 speed is unknown, defaulting to 1000 [ 496.482586][T19301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3460'. [ 496.587406][T19301] nbd: socks must be embedded in a SOCK_ITEM attr [ 496.902604][T18868] udevd[18868]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 497.000876][T19310] wg1 speed is unknown, defaulting to 1000 [ 497.062691][T19310] vxcan1 speed is unknown, defaulting to 1000 [ 497.125234][T19316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3461'. [ 497.733885][T19329] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3465'. [ 498.879184][T19346] netlink: 'syz.4.3468': attribute type 1 has an invalid length. [ 498.891377][T19346] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3468'. [ 499.125726][T19349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3469'. [ 499.434755][ T55] block nbd2: Possible stuck request ffff8880250d7000: control (read@0,1024B). Runtime 60 seconds [ 499.445705][ T55] block nbd2: Possible stuck request ffff8880250d71c0: control (read@1024,1024B). Runtime 60 seconds [ 499.456764][ T55] block nbd2: Possible stuck request ffff8880250d7380: control (read@2048,1024B). Runtime 60 seconds [ 499.468304][ T55] block nbd2: Possible stuck request ffff8880250d7540: control (read@3072,1024B). Runtime 60 seconds [ 499.658143][T19350] wg1 speed is unknown, defaulting to 1000 [ 499.689482][T19350] vxcan1 speed is unknown, defaulting to 1000 [ 500.619250][T19399] netlink: 'syz.3.3479': attribute type 1 has an invalid length. [ 500.632957][T19399] __nla_validate_parse: 2 callbacks suppressed [ 500.632974][T19399] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3479'. [ 500.665552][T19404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3478'. [ 500.840374][T19407] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3482'. [ 500.886776][T19407] netlink: 'syz.3.3482': attribute type 8 has an invalid length. [ 500.928687][T19408] netlink: 'syz.4.3481': attribute type 1 has an invalid length. [ 500.957880][T19408] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3481'. [ 501.312790][T19414] wg1 speed is unknown, defaulting to 1000 [ 501.339070][T19420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3486'. [ 501.405255][T19414] vxcan1 speed is unknown, defaulting to 1000 [ 501.838718][T19422] wg1 speed is unknown, defaulting to 1000 [ 501.849825][T19422] vxcan1 speed is unknown, defaulting to 1000 [ 501.865603][T19438] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3489'. [ 502.862364][T19447] wg1 speed is unknown, defaulting to 1000 [ 502.905856][T19447] vxcan1 speed is unknown, defaulting to 1000 [ 503.552036][T19458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3492'. [ 503.839652][ T5867] Bluetooth: hci1: command 0x0405 tx timeout [ 503.897543][T19460] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3493'. [ 504.003209][T19462] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 504.036624][T19463] netlink: 'syz.4.3493': attribute type 8 has an invalid length. [ 504.816409][T19478] ±ÿ: renamed from batadv_slave_1 (while UP) [ 505.728992][T19484] netlink: 'syz.0.3501': attribute type 1 has an invalid length. [ 505.771890][T19484] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3501'. [ 505.819122][T19484] netlink: 105 bytes leftover after parsing attributes in process `syz.0.3501'. [ 506.025384][T19487] netlink: 'syz.4.3502': attribute type 1 has an invalid length. [ 506.061067][T19487] netlink: 'syz.4.3502': attribute type 1 has an invalid length. [ 506.081408][T19487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3502'. [ 506.294446][T19487] block nbd1: shutting down sockets [ 506.657670][T19495] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3505'. [ 506.682231][ T7710] IPVS: starting estimator thread 0... [ 506.695268][T19495] IPVS: rr: FWM 3 0x00000003 - no destination available [ 506.778885][T19502] IPVS: using max 28 ests per chain, 67200 per kthread [ 506.832050][T19509] tipc: Enabled bearer , priority 0 [ 506.847339][T19509] syzkaller0: entered promiscuous mode [ 506.864230][T19509] syzkaller0: entered allmulticast mode [ 506.871364][T19511] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3510'. [ 506.923203][T19508] tipc: Resetting bearer [ 507.015038][T19508] tipc: Disabling bearer [ 507.690892][T19540] wg1 speed is unknown, defaulting to 1000 [ 507.742286][T19540] vxcan1 speed is unknown, defaulting to 1000 [ 508.004585][T19546] wg1 speed is unknown, defaulting to 1000 [ 508.238923][T19546] vxcan1 speed is unknown, defaulting to 1000 [ 508.258832][T19555] syzkaller0: entered promiscuous mode [ 508.264993][T19555] syzkaller0: entered allmulticast mode [ 509.259108][T19569] wg1 speed is unknown, defaulting to 1000 [ 509.478674][T19569] vxcan1 speed is unknown, defaulting to 1000 [ 509.541579][T19584] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3527'. [ 510.792989][T19605] wg1 speed is unknown, defaulting to 1000 [ 510.828346][T19605] vxcan1 speed is unknown, defaulting to 1000 [ 512.164049][ T5867] Bluetooth: hci1: command 0x0405 tx timeout [ 512.271676][T19613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3535'. [ 512.314267][T19613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3535'. [ 512.552593][T19618] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3536'. [ 512.628001][T19619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3536'. [ 513.333018][T19623] wg1 speed is unknown, defaulting to 1000 [ 513.461080][T19631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3538'. [ 513.475133][T19623] vxcan1 speed is unknown, defaulting to 1000 [ 513.851479][T19635] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 514.631799][T19656] wg1 speed is unknown, defaulting to 1000 [ 514.781836][T19656] vxcan1 speed is unknown, defaulting to 1000 [ 514.801204][T19662] tipc: Enabled bearer , priority 0 [ 514.809523][T19664] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 [ 514.828287][T19662] syzkaller0: entered promiscuous mode [ 514.855853][T19662] syzkaller0: entered allmulticast mode [ 514.900559][T19662] tipc: Resetting bearer [ 514.919679][T19661] tipc: Resetting bearer [ 514.971650][T19666] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3548'. [ 515.004006][T19661] tipc: Disabling bearer [ 515.055000][T19669] netlink: 'syz.1.3549': attribute type 1 has an invalid length. [ 515.104343][T19669] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3549'. [ 515.122229][T19669] netlink: 105 bytes leftover after parsing attributes in process `syz.1.3549'. [ 515.463040][T19679] wg1 speed is unknown, defaulting to 1000 [ 515.507596][T19679] vxcan1 speed is unknown, defaulting to 1000 [ 515.914341][ T5868] Bluetooth: hci4: command 0x0401 tx timeout [ 515.954141][T19684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3554'. [ 515.990144][ T5868] block nbd1: Receive control failed (result -107) [ 516.034222][T19684] nbd1: detected capacity change from 0 to 32 [ 516.042085][T18868] block nbd1: Dead connection, failed to find a fallback [ 516.069420][T18868] block nbd1: shutting down sockets [ 516.093228][T18868] blk_print_req_error: 27 callbacks suppressed [ 516.093249][T18868] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.162618][T18868] buffer_io_error: 27 callbacks suppressed [ 516.162638][T18868] Buffer I/O error on dev nbd1, logical block 0, async page read [ 516.190858][T18868] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.250196][T18868] Buffer I/O error on dev nbd1, logical block 0, async page read [ 516.277937][T18868] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.292817][T18868] Buffer I/O error on dev nbd1, logical block 0, async page read [ 516.303185][T18868] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.321646][T18868] Buffer I/O error on dev nbd1, logical block 0, async page read [ 516.371646][T18868] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.387262][T18868] Buffer I/O error on dev nbd1, logical block 0, async page read [ 516.399525][T19695] openvswitch: netlink: Tunnel attr 226 out of range max 16 [ 516.431070][T18868] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.454376][T18868] Buffer I/O error on dev nbd1, logical block 0, async page read [ 516.462590][T19697] sctp: [Deprecated]: syz.2.3555 (pid 19697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 516.462590][T19697] Use struct sctp_sack_info instead [ 516.480491][T18868] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.490394][T18868] Buffer I/O error on dev nbd1, logical block 0, async page read [ 516.499179][T18868] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.509139][T18868] Buffer I/O error on dev nbd1, logical block 0, async page read [ 516.510144][T19695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3556'. [ 516.517397][T18868] ldm_validate_partition_table(): Disk read failed. [ 516.532822][T18868] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.542543][T18868] Buffer I/O error on dev nbd1, logical block 0, async page read [ 516.560027][T18868] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.581763][T18868] Buffer I/O error on dev nbd1, logical block 0, async page read [ 516.590255][T18868] Dev nbd1: unable to read RDB block 0 [ 516.613681][T18868] nbd1: unable to read partition table [ 516.634818][T18868] ldm_validate_partition_table(): Disk read failed. [ 516.648732][T18868] Dev nbd1: unable to read RDB block 0 [ 516.674529][T18868] nbd1: unable to read partition table [ 517.601421][T19725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3563'. [ 517.658774][T19725] bridge2: entered allmulticast mode [ 518.363921][T19737] team0: Device gtp0 is of different type [ 518.695100][T19735] wg1 speed is unknown, defaulting to 1000 [ 518.705205][T19735] vxcan1 speed is unknown, defaulting to 1000 [ 518.713091][T19745] wg1 speed is unknown, defaulting to 1000 [ 519.049334][T19748] wg1 speed is unknown, defaulting to 1000 [ 519.676298][T19773] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3573'. [ 519.741249][T19772] wg1 speed is unknown, defaulting to 1000 [ 519.881000][T19745] vxcan1 speed is unknown, defaulting to 1000 [ 519.970156][T19775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3574'. [ 520.034705][T19777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3574'. [ 520.062415][T19777] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3574'. [ 520.094587][T19781] netlink: 'syz.4.3574': attribute type 10 has an invalid length. [ 520.094809][T19777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3574'. [ 520.150330][T19777] netlink: 540 bytes leftover after parsing attributes in process `syz.4.3574'. [ 520.237177][T19781] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 520.575882][T19787] netlink: 'syz.4.3578': attribute type 1 has an invalid length. [ 520.583654][T19787] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3578'. [ 520.594842][T19787] netlink: 105 bytes leftover after parsing attributes in process `syz.4.3578'. [ 520.942327][T19748] vxcan1 speed is unknown, defaulting to 1000 [ 521.560343][T19802] tipc: Started in network mode [ 521.585268][T19802] tipc: Node identity fec0ffffffffffff0000000000000001, cluster identity 4711 [ 521.614208][T19802] tipc: Enabling of bearer rejected, failed to enable media [ 521.644060][T19772] vxcan1 speed is unknown, defaulting to 1000 [ 522.166636][T19818] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 522.611175][T19810] wg1 speed is unknown, defaulting to 1000 [ 523.252492][T19838] pim6reg1: entered promiscuous mode [ 523.267574][T19838] pim6reg1: entered allmulticast mode [ 523.344404][T19810] vxcan1 speed is unknown, defaulting to 1000 [ 523.909492][T19842] wg1 speed is unknown, defaulting to 1000 [ 524.090617][T19842] vxcan1 speed is unknown, defaulting to 1000 [ 525.370390][T19852] netlink: 'syz.3.3593': attribute type 1 has an invalid length. [ 525.378503][T19852] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3593'. [ 525.387719][T19852] netlink: 105 bytes leftover after parsing attributes in process `syz.3.3593'. [ 525.771813][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3596'. [ 526.093513][T19866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3597'. [ 526.353462][T19866] bond1: entered promiscuous mode [ 526.359141][T19866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 526.492631][T19878] tipc: Enabled bearer , priority 0 [ 526.532551][T19871] syzkaller0: entered promiscuous mode [ 526.538398][T19871] syzkaller0: entered allmulticast mode [ 526.660721][T19885] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3601'. [ 526.714985][T19876] tipc: Resetting bearer [ 526.752069][T19865] wg1 speed is unknown, defaulting to 1000 [ 526.773480][T19870] tipc: Resetting bearer [ 526.837566][T19870] tipc: Disabling bearer [ 526.874740][T19865] vxcan1 speed is unknown, defaulting to 1000 [ 526.892949][T19888] netlink: 'syz.3.3602': attribute type 1 has an invalid length. [ 527.012301][T19888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 527.193124][T19890] 8021q: adding VLAN 0 to HW filter on device bond2 [ 527.219114][T19890] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 527.263663][T19905] netlink: 'syz.1.3605': attribute type 28 has an invalid length. [ 527.273791][T19890] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 527.402531][T19892] veth5: entered promiscuous mode [ 527.413793][T19896] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3603'. [ 527.442874][T19910] netlink: 'syz.1.3606': attribute type 1 has an invalid length. [ 527.473422][T19910] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3606'. [ 527.488289][T19910] netlink: 105 bytes leftover after parsing attributes in process `syz.1.3606'. [ 527.923427][T19932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3610'. [ 528.103805][T19936] tipc: Started in network mode [ 528.123290][T19936] tipc: Node identity 72d9172ded16, cluster identity 4711 [ 528.131023][T19936] tipc: Enabled bearer , priority 0 [ 528.231337][T19934] syzkaller0: entered promiscuous mode [ 528.246497][T19934] syzkaller0: entered allmulticast mode [ 528.270138][T19934] tipc: Resetting bearer [ 528.286888][T19933] tipc: Resetting bearer [ 528.324739][T19933] tipc: Disabling bearer [ 528.558370][T19941] wg1 speed is unknown, defaulting to 1000 [ 528.601783][T19941] vxcan1 speed is unknown, defaulting to 1000 [ 528.742233][T19946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3615'. [ 529.035216][ T5867] Bluetooth: hci3: command 0x0405 tx timeout [ 529.329027][T19964] syzkaller0: entered promiscuous mode [ 529.346606][T19964] syzkaller0: entered allmulticast mode [ 529.515492][ T55] block nbd2: Possible stuck request ffff8880250d7000: control (read@0,1024B). Runtime 90 seconds [ 529.526554][ T55] block nbd2: Possible stuck request ffff8880250d71c0: control (read@1024,1024B). Runtime 90 seconds [ 529.538986][ T55] block nbd2: Possible stuck request ffff8880250d7380: control (read@2048,1024B). Runtime 90 seconds [ 529.550064][ T55] block nbd2: Possible stuck request ffff8880250d7540: control (read@3072,1024B). Runtime 90 seconds [ 529.717876][T19976] netlink: 'syz.0.3625': attribute type 1 has an invalid length. [ 529.746505][T19977] netlink: 'syz.2.3626': attribute type 1 has an invalid length. [ 530.420967][T19991] __nla_validate_parse: 4 callbacks suppressed [ 530.420984][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3629'. [ 530.940573][T20001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3632'. [ 531.057041][T20009] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 531.057557][T20011] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3635'. [ 531.882252][T20027] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3639'. [ 531.912063][T20027] block nbd0: must specify backend [ 532.175853][T20042] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3640'. [ 532.203472][T20037] wg1 speed is unknown, defaulting to 1000 [ 532.241571][T20037] vxcan1 speed is unknown, defaulting to 1000 [ 532.275117][ T5868] Bluetooth: hci1: link tx timeout [ 532.280948][ T5868] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 532.295813][ T5868] Bluetooth: hci1: link tx timeout [ 532.300966][ T5868] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 532.430374][T20047] wg1 speed is unknown, defaulting to 1000 [ 533.423288][T20047] vxcan1 speed is unknown, defaulting to 1000 [ 533.633372][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3646'. [ 533.749077][T20062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.938773][T20062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.082497][T20065] netlink: 'syz.0.3646': attribute type 1 has an invalid length. [ 534.316573][ T5868] Bluetooth: hci1: command 0x0405 tx timeout [ 534.579403][T20080] syzkaller0: entered promiscuous mode [ 534.585689][T20080] syzkaller0: entered allmulticast mode [ 535.513428][T20048] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3644'. [ 535.672633][T20095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.266791][T20104] tipc: Enabled bearer , priority 0 [ 536.285177][T20104] syzkaller0: entered promiscuous mode [ 536.290687][T20104] syzkaller0: entered allmulticast mode [ 536.363196][T20104] tipc: Resetting bearer [ 536.389341][T20102] tipc: Resetting bearer [ 536.410090][T20107] netlink: 'syz.2.3659': attribute type 1 has an invalid length. [ 536.427427][T20107] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3659'. [ 536.454142][T20107] netlink: 105 bytes leftover after parsing attributes in process `syz.2.3659'. [ 536.484804][ T5868] Bluetooth: hci1: command 0x0405 tx timeout [ 536.510457][T20102] tipc: Disabling bearer [ 536.665335][T20109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3660'. [ 536.688445][T20109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3660'. [ 536.725127][T20112] tipc: Started in network mode [ 536.730549][T20112] tipc: Node identity c6037845fbf9, cluster identity 4711 [ 536.779061][T20112] tipc: Enabled bearer , priority 0 [ 536.845313][T20114] tun0: tun_chr_ioctl cmd 1074025675 [ 536.858028][T20114] tun0: persist enabled [ 536.862541][T20109] syzkaller0: entered promiscuous mode [ 536.886443][T20109] syzkaller0: entered allmulticast mode [ 536.922041][T20114] tun0: tun_chr_ioctl cmd 1074025675 [ 536.934818][T20114] tun0: persist enabled [ 536.946282][T20109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3660'. [ 537.016947][T20109] tipc: Resetting bearer [ 537.072597][T20126] netlink: 'syz.1.3666': attribute type 1 has an invalid length. [ 537.094287][T20108] tipc: Resetting bearer [ 537.110567][T20126] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3666'. [ 537.136878][T20126] netlink: 105 bytes leftover after parsing attributes in process `syz.1.3666'. [ 537.162635][T20108] tipc: Disabling bearer [ 537.211731][T20131] sch_tbf: peakrate 9 is lower than or equals to rate 1988635966197966294 ! [ 538.191927][T20149] netlink: 'syz.1.3672': attribute type 1 has an invalid length. [ 538.208495][T20149] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3672'. [ 538.245576][T20149] netlink: 105 bytes leftover after parsing attributes in process `syz.1.3672'. [ 538.299665][T20156] netlink: 'syz.4.3674': attribute type 15 has an invalid length. [ 538.832680][T20186] siw: device registration error -23 [ 538.909695][T20191] netlink: 'syz.0.3684': attribute type 3 has an invalid length. [ 538.949204][T20186] netlink: 'syz.4.3682': attribute type 4 has an invalid length. [ 539.465369][T20219] pim6reg: entered allmulticast mode [ 539.486362][T20219] pim6reg: left allmulticast mode [ 539.700779][T20238] netlink: 'syz.2.3699': attribute type 10 has an invalid length. [ 539.779604][T20239] Bluetooth: MGMT ver 1.23 [ 539.804868][T20236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.911281][T20236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.053384][T20236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.185858][T20236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.301084][T20247] syzkaller1: entered promiscuous mode [ 540.307086][T20247] syzkaller1: entered allmulticast mode [ 540.402746][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.434877][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.479408][ T1099] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.538799][ T6945] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.606430][T20262] __nla_validate_parse: 8 callbacks suppressed [ 540.606448][T20262] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3705'. [ 540.872816][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3710'. [ 540.889608][T20269] vxcan1 speed is unknown, defaulting to 1000 [ 540.909173][T20272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3712'. [ 540.922051][T20267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3710'. [ 541.088280][T20264] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 541.116891][T20274] bridge_slave_0: left promiscuous mode [ 541.129151][T20274] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.143787][T20274] bridge_slave_1: left allmulticast mode [ 541.154650][T20274] bridge_slave_1: left promiscuous mode [ 541.163302][T20274] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.181190][T20274] bond0: (slave bond_slave_0): Releasing backup interface [ 541.221146][T20274] bond0: (slave bond_slave_1): Releasing backup interface [ 541.252766][T20274] team0: Port device team_slave_0 removed [ 541.279856][T20274] team0: Port device team_slave_1 removed [ 541.287253][T20274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.295031][T20274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.303539][T20274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.311182][T20274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.327770][T20274] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 541.359336][T20282] netlink: 'syz.4.3711': attribute type 10 has an invalid length. [ 541.362990][T20267] vxcan1 speed is unknown, defaulting to 1000 [ 541.396225][T20280] bond0: (slave vlan2): Opening slave failed [ 541.522881][T20274] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3711'. [ 541.981056][T20292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3716'. [ 542.525468][T20306] block nbd4: Unsupported socket: shutdown callout must be supported. [ 542.541074][T20306] netlink: 'syz.4.3721': attribute type 7 has an invalid length. [ 543.391834][T20309] netlink: 'syz.1.3722': attribute type 1 has an invalid length. [ 544.407272][ T5868] Bluetooth: hci4: command 0x0401 tx timeout [ 544.799043][T20286] vxcan1 speed is unknown, defaulting to 1000 [ 544.822853][T20309] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 544.930657][T20311] gretap1: entered promiscuous mode [ 545.310600][T20318] ip6erspan0: entered allmulticast mode [ 545.463800][T20325] blkio.reset_stats is deprecated [ 545.737082][T20334] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 545.751560][T20334] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 545.800744][T20334] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 545.951945][T20350] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 546.177050][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3736'. [ 546.292899][T20366] siw: device registration error -23 [ 546.741230][T20372] vxcan1 speed is unknown, defaulting to 1000 [ 547.019063][T20381] tipc: Enabling of bearer rejected, failed to enable media [ 547.054356][T20381] tipc: Enabling of bearer rejected, failed to enable media [ 547.436099][T20394] netlink: 'syz.1.3744': attribute type 7 has an invalid length. [ 547.566761][T20394] : entered promiscuous mode [ 547.649850][T20393] vxcan1 speed is unknown, defaulting to 1000 [ 548.185736][T20389] vxcan1 speed is unknown, defaulting to 1000 [ 548.871312][T20404] vxcan1 speed is unknown, defaulting to 1000 [ 549.060271][T20437] syzkaller0: entered promiscuous mode [ 549.066343][T20437] syzkaller0: entered allmulticast mode [ 549.073609][T20437] FAULT_INJECTION: forcing a failure. [ 549.073609][T20437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.101301][T20437] CPU: 0 UID: 0 PID: 20437 Comm: syz.3.3756 Not tainted syzkaller #0 PREEMPT(full) [ 549.101349][T20437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 549.101362][T20437] Call Trace: [ 549.101370][T20437] [ 549.101379][T20437] dump_stack_lvl+0x189/0x250 [ 549.101405][T20437] ? __pfx____ratelimit+0x10/0x10 [ 549.101425][T20437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.101444][T20437] ? __pfx__printk+0x10/0x10 [ 549.101466][T20437] ? __might_fault+0xb0/0x130 [ 549.101500][T20437] should_fail_ex+0x414/0x560 [ 549.101528][T20437] _copy_from_iter+0x1de/0x1790 [ 549.101554][T20437] ? __lock_acquire+0xab9/0xd20 [ 549.101583][T20437] ? __pfx__copy_from_iter+0x10/0x10 [ 549.101619][T20437] tun_get_user+0x488/0x3e20 [ 549.101660][T20437] ? aa_file_perm+0x44d/0x1550 [ 549.101678][T20437] ? __pfx_tun_get_user+0x10/0x10 [ 549.101695][T20437] ? _parse_integer_limit+0x1ae/0x1f0 [ 549.101729][T20437] ? __lock_acquire+0xab9/0xd20 [ 549.101757][T20437] ? ref_tracker_alloc+0x318/0x460 [ 549.101778][T20437] ? __lock_acquire+0xab9/0xd20 [ 549.101801][T20437] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 549.101828][T20437] ? tun_get+0x1c/0x2f0 [ 549.101852][T20437] ? tun_get+0x1c/0x2f0 [ 549.101869][T20437] ? tun_get+0x1c/0x2f0 [ 549.101892][T20437] tun_chr_write_iter+0x113/0x200 [ 549.101914][T20437] vfs_write+0x5c9/0xb30 [ 549.101941][T20437] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 549.101961][T20437] ? __pfx_vfs_write+0x10/0x10 [ 549.101993][T20437] ? __fget_files+0x2a/0x420 [ 549.102018][T20437] ksys_write+0x145/0x250 [ 549.102043][T20437] ? __pfx_ksys_write+0x10/0x10 [ 549.102061][T20437] ? rcu_is_watching+0x15/0xb0 [ 549.102091][T20437] ? do_syscall_64+0xbe/0x3b0 [ 549.102115][T20437] do_syscall_64+0xfa/0x3b0 [ 549.102133][T20437] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.102150][T20437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.102167][T20437] ? clear_bhb_loop+0x60/0xb0 [ 549.102188][T20437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.102205][T20437] RIP: 0033:0x7f0b6458eba9 [ 549.102222][T20437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.102236][T20437] RSP: 002b:00007f0b653e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 549.102259][T20437] RAX: ffffffffffffffda RBX: 00007f0b647d5fa0 RCX: 00007f0b6458eba9 [ 549.102273][T20437] RDX: 000000000000ffdd RSI: 0000200000000200 RDI: 0000000000000003 [ 549.102285][T20437] RBP: 00007f0b653e3090 R08: 0000000000000000 R09: 0000000000000000 [ 549.102296][T20437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.102308][T20437] R13: 00007f0b647d6038 R14: 00007f0b647d5fa0 R15: 00007ffc26ce04d8 [ 549.102338][T20437] [ 549.531966][T20440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3757'. [ 550.071647][T20435] vxcan1 speed is unknown, defaulting to 1000 [ 550.483738][T20443] vxcan1 speed is unknown, defaulting to 1000 [ 550.600831][T20449] syzkaller0: entered promiscuous mode [ 550.607329][T20449] syzkaller0: entered allmulticast mode [ 550.957654][T20455] netlink: 'syz.2.3761': attribute type 1 has an invalid length. [ 550.971981][T20455] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3761'. [ 550.981636][T20455] netlink: 105 bytes leftover after parsing attributes in process `syz.2.3761'. [ 551.202020][T20462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3763'. [ 552.555478][T20479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3769'. [ 552.671478][T20479] nbd: socks must be embedded in a SOCK_ITEM attr [ 552.700105][T18868] block nbd64: NBD_DISCONNECT [ 553.030766][T20493] netlink: 'syz.4.3772': attribute type 1 has an invalid length. [ 553.043685][T18390] udevd[18390]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 553.049565][T20493] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3772'. [ 553.092752][T20493] netlink: 105 bytes leftover after parsing attributes in process `syz.4.3772'. [ 553.155494][T20494] vxcan1 speed is unknown, defaulting to 1000 [ 553.952890][T20511] netlink: 'syz.0.3778': attribute type 2 has an invalid length. [ 553.960808][T20511] netlink: 'syz.0.3778': attribute type 1 has an invalid length. [ 554.080371][T20513] can: request_module (can-proto-3) failed. [ 554.215983][T20520] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3780'. [ 554.273904][T20523] netlink: 'syz.0.3781': attribute type 1 has an invalid length. [ 554.315343][T20491] vxcan1 speed is unknown, defaulting to 1000 [ 554.593078][T20538] vxcan3: entered promiscuous mode [ 554.943270][T20554] netlink: 'syz.4.3789': attribute type 1 has an invalid length. [ 554.951947][T20554] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3789'. [ 554.961657][T20554] netlink: 105 bytes leftover after parsing attributes in process `syz.4.3789'. [ 555.068466][T20561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3792'. [ 555.161296][T20535] vxcan1 speed is unknown, defaulting to 1000 [ 555.580822][T20557] vxcan1 speed is unknown, defaulting to 1000 [ 556.397612][T20577] vxcan1 speed is unknown, defaulting to 1000 [ 558.808037][T20608] netlink: 'syz.3.3803': attribute type 1 has an invalid length. [ 558.837558][T20598] vxcan1 speed is unknown, defaulting to 1000 [ 558.940637][T20610] netlink: 'syz.3.3804': attribute type 1 has an invalid length. [ 558.954711][T20610] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3804'. [ 558.977028][T20610] netlink: 105 bytes leftover after parsing attributes in process `syz.3.3804'. [ 559.123751][T20615] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3806'. [ 559.595820][ T55] block nbd2: Possible stuck request ffff8880250d7000: control (read@0,1024B). Runtime 120 seconds [ 559.606735][ T55] block nbd2: Possible stuck request ffff8880250d71c0: control (read@1024,1024B). Runtime 120 seconds [ 559.618342][ T55] block nbd2: Possible stuck request ffff8880250d7380: control (read@2048,1024B). Runtime 120 seconds [ 559.629979][ T55] block nbd2: Possible stuck request ffff8880250d7540: control (read@3072,1024B). Runtime 120 seconds [ 559.757490][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 559.980459][T20634] vxcan1 speed is unknown, defaulting to 1000 [ 560.729120][T20650] tipc: Enabling of bearer rejected, failed to enable media [ 561.266337][T20669] netlink: 'syz.3.3818': attribute type 1 has an invalid length. [ 561.275133][T20655] vxcan1 speed is unknown, defaulting to 1000 [ 561.276460][T20669] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3818'. [ 561.326766][T20669] netlink: 105 bytes leftover after parsing attributes in process `syz.3.3818'. [ 562.631213][T20696] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3822'. [ 563.009733][ T6945] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.024288][ T6945] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.088220][ T3583] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.126412][ T3583] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.478225][T20711] vxcan1 speed is unknown, defaulting to 1000 [ 563.987430][T20701] rdma_rxe: rxe_newlink: failed to add macsec0 [ 564.214526][T20721] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3826'. [ 564.725335][T20721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.772772][T20721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.791700][T20721] bond0 (unregistering): Released all slaves [ 565.620090][T20752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3835'. [ 565.704729][T20757] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3835'. [ 566.648265][T20780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3844'. [ 566.690628][T20785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3847'. [ 566.913435][T20790] vxcan1 speed is unknown, defaulting to 1000 [ 566.922948][T20797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3851'. [ 567.046978][T20800] tun0: tun_chr_ioctl cmd 2147767521 [ 567.053063][T20800] bond0: (slave rose0): Error: Device can not be enslaved while up [ 567.348250][T20792] vxcan1 speed is unknown, defaulting to 1000 [ 567.566544][T20824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3860'. [ 567.578619][T20825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3859'. [ 567.988421][T20838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3862'. [ 568.615712][ T6947] bond1 (unregistering): (slave gretap1): Releasing active interface [ 568.642573][ T6947] bond7 (unregistering): (slave gretap2): Releasing active interface [ 569.011333][ T6947] bond1 (unregistering): Released all slaves [ 569.024926][ T6947] bond2 (unregistering): Released all slaves [ 569.037494][ T6947] bond3 (unregistering): Released all slaves [ 569.056576][ T6947] bond4 (unregistering): Released all slaves [ 569.076718][ T6947] bond5 (unregistering): Released all slaves [ 569.093690][ T6947] bond6 (unregistering): Released all slaves [ 569.107955][ T6947] bond7 (unregistering): Released all slaves [ 569.238539][ T6947] bond8 (unregistering): (slave batadv1): Releasing active interface [ 569.247736][ T6947] bond8 (unregistering): Released all slaves [ 569.367331][ T6947] bond9 (unregistering): Released all slaves [ 569.379608][ T6947] bond10 (unregistering): Released all slaves [ 569.497381][ T6947] bond11 (unregistering): Released all slaves [ 569.510281][ T6947] bond0 (unregistering): Released all slaves [ 569.522947][ T6947] bond12 (unregistering): Released all slaves [ 569.650083][ T6947] bond13 (unregistering): (slave veth13): Releasing active interface [ 569.667423][ T6947] bond13 (unregistering): Released all slaves [ 569.837267][T20858] netlink: 'syz.4.3868': attribute type 1 has an invalid length. [ 569.868906][ T5234] udevd[5234]: worker [17830] /devices/virtual/block/nbd2 is taking a long time [ 569.873207][T20858] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3868'. [ 569.884068][ T5234] udevd[5234]: worker [17836] /devices/virtual/block/nbd0 is taking a long time [ 569.915396][T20858] netlink: 105 bytes leftover after parsing attributes in process `syz.4.3868'. [ 569.934540][ T6947] tipc: Disabling bearer [ 569.940124][ T6947] tipc: Left network mode [ 570.860479][T20882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3876'. [ 571.155465][T20878] vxcan1 speed is unknown, defaulting to 1000 [ 571.177513][T20893] sctp: [Deprecated]: syz.1.3877 (pid 20893) Use of int in max_burst socket option. [ 571.177513][T20893] Use struct sctp_assoc_value instead [ 571.795945][T20906] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3880'. [ 572.257288][T20930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3887'. [ 572.299128][T20930] veth0: entered promiscuous mode [ 572.347030][T20930] veth0: left promiscuous mode [ 572.626750][T20932] vxcan1 speed is unknown, defaulting to 1000 [ 572.702134][ T30] audit: type=1800 audit(1757640732.649:12): pid=20948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3893" name="memory.events" dev="tmpfs" ino=1030 res=0 errno=0 [ 572.747133][ T30] audit: type=1804 audit(1757640732.649:13): pid=20948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3893" name="/newroot/199/memory.events" dev="tmpfs" ino=1030 res=1 errno=0 [ 572.855581][T20948] netlink: 212364 bytes leftover after parsing attributes in process `syz.4.3893'. [ 572.865996][T20948] openvswitch: netlink: Message has 5 unknown bytes. [ 573.524092][ T6947] hsr_slave_0: left promiscuous mode [ 573.551202][ T6947] hsr_slave_1: left promiscuous mode [ 574.600989][T20934] vxcan1 speed is unknown, defaulting to 1000 [ 574.939217][T20974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3900'. [ 575.115090][ T5864] Bluetooth: hci0: command 0x0405 tx timeout [ 575.333089][T20982] ipvlan0: entered promiscuous mode [ 575.421663][T20988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3906'. [ 575.526864][T20990] atomic_op ffff888050e7d998 conn xmit_atomic 0000000000000000 [ 576.181574][T20999] vxcan1 speed is unknown, defaulting to 1000 [ 576.187737][ T6947] IPVS: stop unused estimator thread 0... [ 576.692352][T21012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3913'. [ 577.047988][T21023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3918'. [ 577.071259][T21023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3918'. [ 577.588790][T21044] netlink: 'syz.1.3925': attribute type 16 has an invalid length. [ 577.603652][T21044] netlink: 'syz.1.3925': attribute type 3 has an invalid length. [ 577.611683][T21044] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.3925'. [ 578.691987][T21076] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3935'. [ 578.790242][T21082] tipc: Enabling of bearer rejected, failed to enable media [ 579.207357][T21103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3938'. [ 579.292667][T21107] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 579.373470][T21095] vxcan1 speed is unknown, defaulting to 1000 [ 579.382116][T21109] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3942'. [ 579.402873][T21109] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3942'. [ 579.492256][T21111] netlink: 'syz.2.3943': attribute type 1 has an invalid length. [ 579.739472][T21120] bridge0: entered promiscuous mode [ 579.909313][T21119] IPVS: length: 16 != 8 [ 579.983330][T21125] syzkaller0: entered promiscuous mode [ 580.004056][T21125] syzkaller0: entered allmulticast mode [ 580.300515][T21134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.382257][T21141] __nla_validate_parse: 2 callbacks suppressed [ 580.382273][T21141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3949'. [ 580.649032][T21152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3952'. [ 580.664247][T21136] vxcan1 speed is unknown, defaulting to 1000 [ 581.122891][T21150] vxcan1 speed is unknown, defaulting to 1000 [ 581.139561][T21164] 8021q: VLANs not supported on ip_vti0 [ 581.169833][T21164] netlink: 'syz.3.3955': attribute type 1 has an invalid length. [ 581.181927][T21164] netlink: 'syz.3.3955': attribute type 2 has an invalid length. [ 581.190105][T21164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3955'. [ 581.429156][T21171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3957'. [ 581.467985][T21173] netlink: 'syz.3.3958': attribute type 5 has an invalid length. [ 581.569207][T21176] netlink: 'syz.0.3959': attribute type 24 has an invalid length. [ 581.700937][T21178] vxcan1 speed is unknown, defaulting to 1000 [ 581.726320][T21181] netlink: 'syz.0.3961': attribute type 7 has an invalid length. [ 581.734206][T21181] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3961'. [ 581.847149][T21183] FAULT_INJECTION: forcing a failure. [ 581.847149][T21183] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 581.862655][T21183] CPU: 0 UID: 0 PID: 21183 Comm: syz.0.3962 Not tainted syzkaller #0 PREEMPT(full) [ 581.862682][T21183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 581.862694][T21183] Call Trace: [ 581.862702][T21183] [ 581.862710][T21183] dump_stack_lvl+0x189/0x250 [ 581.862736][T21183] ? __pfx____ratelimit+0x10/0x10 [ 581.862757][T21183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.862778][T21183] ? __pfx__printk+0x10/0x10 [ 581.862802][T21183] ? fs_reclaim_acquire+0x7d/0x100 [ 581.862829][T21183] should_fail_ex+0x414/0x560 [ 581.862857][T21183] prepare_alloc_pages+0x213/0x610 [ 581.862884][T21183] __alloc_frozen_pages_noprof+0x123/0x370 [ 581.862913][T21183] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 581.862942][T21183] ? policy_nodemask+0x27c/0x720 [ 581.862962][T21183] ? __lock_acquire+0xab9/0xd20 [ 581.862991][T21183] alloc_pages_mpol+0x232/0x4a0 [ 581.863020][T21183] vma_alloc_folio_noprof+0xe4/0x200 [ 581.863046][T21183] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 581.863083][T21183] folio_prealloc+0x30/0x180 [ 581.863107][T21183] __handle_mm_fault+0x2ab9/0x5440 [ 581.863127][T21183] ? __lock_acquire+0xab9/0xd20 [ 581.863165][T21183] ? __pfx___handle_mm_fault+0x10/0x10 [ 581.863201][T21183] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 581.863219][T21183] ? lock_vma_under_rcu+0xdf/0x3d0 [ 581.863240][T21183] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 581.863271][T21183] handle_mm_fault+0x40a/0x8e0 [ 581.863303][T21183] do_user_addr_fault+0xa81/0x1390 [ 581.863335][T21183] ? rcu_is_watching+0x15/0xb0 [ 581.863354][T21183] ? trace_page_fault_user+0x84/0x1e0 [ 581.863374][T21183] exc_page_fault+0x76/0xf0 [ 581.863395][T21183] asm_exc_page_fault+0x26/0x30 [ 581.863412][T21183] RIP: 0033:0x7f340e85a5ab [ 581.863429][T21183] Code: 00 00 00 48 8d 3d 3d 3a 19 00 48 89 c1 31 c0 e8 4b 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 3a 19 00 48 89 34 24 48 8b 14 24 48 8b [ 581.863444][T21183] RSP: 002b:00007f340f834fb0 EFLAGS: 00010202 [ 581.863461][T21183] RAX: 0000000000000000 RBX: 00007f340ebd5fa0 RCX: 0000000000000000 [ 581.863473][T21183] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000400 [ 581.863484][T21183] RBP: 00007f340f836090 R08: 0000000000000000 R09: 0000000000000000 [ 581.863496][T21183] R10: 0000200000000400 R11: 0000000000000000 R12: 0000000000000001 [ 581.863507][T21183] R13: 00007f340ebd6038 R14: 00007f340ebd5fa0 R15: 00007ffde2bb5b78 [ 581.863538][T21183] [ 582.121708][T21183] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 582.540057][T21191] vxcan1 speed is unknown, defaulting to 1000 [ 584.055567][T21213] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3971'. [ 584.733645][T21221] vxcan1 speed is unknown, defaulting to 1000 [ 584.989661][T21228] tipc: Enabled bearer , priority 0 [ 585.000386][T21228] syzkaller0: entered promiscuous mode [ 585.009042][T21228] syzkaller0: entered allmulticast mode [ 585.040815][T21228] tipc: Resetting bearer [ 585.050650][T21227] tipc: Resetting bearer [ 585.072698][T21227] tipc: Disabling bearer [ 585.562964][T21238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3981'. [ 585.730815][T21240] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3982'. [ 585.883519][T21251] syzkaller0: entered promiscuous mode [ 585.909645][T21251] syzkaller0: entered allmulticast mode [ 586.231220][T21262] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 586.249908][T21262] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 586.261987][T21262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 586.574446][T21268] syzkaller0: entered promiscuous mode [ 586.590271][T21268] syzkaller0: entered allmulticast mode [ 587.012118][T21280] syzkaller0: entered promiscuous mode [ 587.089257][T21280] syzkaller0: entered allmulticast mode [ 587.159119][T21291] syzkaller1: entered promiscuous mode [ 587.184200][T21291] netlink: 'syz.2.3996': attribute type 12 has an invalid length. [ 587.214470][T21283] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3994'. [ 587.218325][T21292] Set syz0 is full, maxelem 0 reached [ 587.718890][T21307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3999'. [ 587.882002][T21312] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4002'. [ 587.905899][T21313] Bluetooth: MGMT ver 1.23 [ 587.974908][T21313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4003'. [ 588.441313][T21337] vxcan1 speed is unknown, defaulting to 1000 [ 588.572555][T21343] nicvf0: entered promiscuous mode [ 588.587154][T21348] 8021q: VLANs not supported on ip6_vti0 [ 588.593471][ T6947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 588.619346][T21352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4015'. [ 588.652996][ T6947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 588.703216][ T6947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 588.735576][ T6947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 588.740634][T21355] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4017'. [ 588.873783][T21360] netlink: 'syz.2.4017': attribute type 2 has an invalid length. [ 588.881929][T21360] netlink: 119 bytes leftover after parsing attributes in process `syz.2.4017'. [ 589.127345][T21367] netlink: 'syz.2.4018': attribute type 10 has an invalid length. [ 589.251688][T21372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4021'. [ 589.674876][ T55] block nbd2: Possible stuck request ffff8880250d7000: control (read@0,1024B). Runtime 150 seconds [ 589.686008][ T55] block nbd2: Possible stuck request ffff8880250d71c0: control (read@1024,1024B). Runtime 150 seconds [ 589.697260][ T55] block nbd2: Possible stuck request ffff8880250d7380: control (read@2048,1024B). Runtime 150 seconds [ 589.708512][ T55] block nbd2: Possible stuck request ffff8880250d7540: control (read@3072,1024B). Runtime 150 seconds [ 589.782794][T21389] netlink: 'syz.2.4024': attribute type 19 has an invalid length. [ 589.860662][ T6950] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.880367][T21392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.947357][ T6950] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.006895][ T6950] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.054726][ T6950] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.378849][T21402] IPVS: stopping backup sync thread 20009 ... [ 590.396102][T21402] netlink: 'syz.0.4030': attribute type 5 has an invalid length. [ 590.420735][T21402] IPv6: sit2: Disabled Multicast RS [ 590.580368][T21414] __nla_validate_parse: 6 callbacks suppressed [ 590.580387][T21414] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4032'. [ 590.600721][T21414] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 590.685497][T21418] netlink: 'syz.0.4034': attribute type 1 has an invalid length. [ 590.693361][T21418] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4034'. [ 590.702428][T21418] netlink: 105 bytes leftover after parsing attributes in process `syz.0.4034'. [ 590.766718][T21420] vxcan1 speed is unknown, defaulting to 1000 [ 591.324857][T21430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4038'. [ 591.527392][T21448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4039'. [ 591.618231][T21454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4042'. [ 591.670040][T21449] vxcan1 speed is unknown, defaulting to 1000 [ 591.716300][T21455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4042'. [ 591.948239][T21460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4043'. [ 592.520363][T21483] netlink: 'syz.1.4052': attribute type 9 has an invalid length. [ 592.582781][T21483] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4052'. [ 593.137799][T21505] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4056'. [ 593.261238][T21505] ip6tnl1: entered promiscuous mode [ 593.322726][T21505] ip6tnl1: entered allmulticast mode [ 593.501099][T21516] dvmrp8: entered allmulticast mode [ 593.802935][T21528] vxcan1 speed is unknown, defaulting to 1000 [ 593.893737][T21540] erspan0: entered allmulticast mode [ 594.180120][T21540] ipvlan0: left promiscuous mode [ 594.229124][T21540] bond1: left promiscuous mode [ 594.249103][T21541] ip6gre1: entered allmulticast mode [ 594.257668][ T7710] vxcan1 speed is unknown, defaulting to 1000 [ 594.263770][ T7710] syz2: Port: 1 Link DOWN [ 594.276398][ T6950] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.289878][ T6950] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.300022][ T7713] vxcan1 speed is unknown, defaulting to 1000 [ 594.306041][T21515] dvmrp8: left allmulticast mode [ 594.368707][ T6950] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.379639][ T6950] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.391302][T21576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.844006][T21579] __nla_validate_parse: 1 callbacks suppressed [ 595.844026][T21579] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4073'. [ 596.909245][T21580] ip6tnl2: entered promiscuous mode [ 596.988124][T21591] netlink: 'syz.0.4075': attribute type 30 has an invalid length. [ 597.040105][T21591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4075'. [ 597.192886][ T7713] IPVS: starting estimator thread 0... [ 597.229356][T21591] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 597.294049][T21606] IPVS: using max 30 ests per chain, 72000 per kthread [ 597.514639][T21614] bridge_slave_0: left allmulticast mode [ 597.575911][T21614] bond1: left promiscuous mode [ 597.590803][T21614] ip6tnl2: left promiscuous mode [ 597.638800][T21615] vxcan1 speed is unknown, defaulting to 1000 [ 597.961176][T21624] netlink: 'syz.3.4082': attribute type 1 has an invalid length. [ 597.971333][T21624] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4082'. [ 597.985697][T21624] netlink: 105 bytes leftover after parsing attributes in process `syz.3.4082'. [ 598.242476][T21631] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4084'. [ 598.286352][T21631] batadv1: entered promiscuous mode [ 598.291769][T21631] batadv1: entered allmulticast mode [ 598.340209][T21621] vxcan1 speed is unknown, defaulting to 1000 [ 598.537036][T21641] dvmrp8: entered allmulticast mode [ 598.652476][T21649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4088'. [ 598.733589][T21653] syz_tun: entered allmulticast mode [ 598.827621][T21657] netlink: 'syz.2.4089': attribute type 23 has an invalid length. [ 598.896005][T21637] vxcan1 speed is unknown, defaulting to 1000 [ 599.361878][T21653] vxcan1 speed is unknown, defaulting to 1000 [ 599.930444][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4095'. [ 600.404930][T21693] vxcan1 speed is unknown, defaulting to 1000 [ 603.155125][T21749] netlink: 'syz.3.4117': attribute type 10 has an invalid length. [ 603.205149][T21751] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4118'. [ 603.481274][T21758] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4121'. [ 603.803597][T21777] bridge2: entered allmulticast mode [ 603.818006][T21777] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4127'. [ 604.031502][T21781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4129'. [ 604.054703][T21781] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4129'. [ 604.510897][T21802] vxcan1 speed is unknown, defaulting to 1000 [ 604.542967][T21806] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4137'. [ 604.571229][T21806] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4137'. [ 604.590680][T21810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4135'. [ 604.615062][T21806] netlink: 'syz.4.4137': attribute type 5 has an invalid length. [ 604.622824][T21806] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4137'. [ 604.711048][T21811] bond0: entered promiscuous mode [ 604.736419][T21811] batadv0: entered promiscuous mode [ 604.762435][T21811] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 604.785115][T21811] hsr1: entered allmulticast mode [ 604.790186][T21811] bond0: entered allmulticast mode [ 604.799807][T21811] batadv0: entered allmulticast mode [ 604.806189][T21811] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 604.835230][T21811] bond0: left promiscuous mode [ 604.848787][T21811] batadv0: left promiscuous mode [ 605.476791][T21845] openvswitch: netlink: IPv6 tunnel dst address is zero [ 605.607430][T21852] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 605.613167][T21852] dvmrp1: linktype set to 517 [ 605.833351][T21854] Set syz0 is full, maxelem 0 reached [ 606.013364][T21861] tipc: Enabled bearer , priority 0 [ 606.039950][T21861] syzkaller0: entered promiscuous mode [ 606.059505][T21861] syzkaller0: entered allmulticast mode [ 606.115880][T21861] tipc: Resetting bearer [ 606.138405][T21859] tipc: Resetting bearer [ 606.157185][T21859] tipc: Disabling bearer [ 606.191728][T21865] vxcan1 speed is unknown, defaulting to 1000 [ 606.384980][T21879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4162'. [ 606.663509][T21872] vxcan1 speed is unknown, defaulting to 1000 [ 607.259241][T21869] vxcan1 speed is unknown, defaulting to 1000 [ 607.731305][T21900] vxcan1 speed is unknown, defaulting to 1000 [ 608.427296][T21926] __nla_validate_parse: 4 callbacks suppressed [ 608.427316][T21926] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4177'. [ 608.621702][T21926] vxcan1 speed is unknown, defaulting to 1000 [ 609.351934][T21941] Set syz0 is full, maxelem 0 reached [ 609.532767][T21948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4184'. [ 609.556325][T21948] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4184'. [ 609.848598][T21949] vxcan1 speed is unknown, defaulting to 1000 [ 610.561655][T21955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4186'. [ 611.254926][ T1040] tipc: Subscription rejected, illegal request [ 611.293789][T21974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4192'. [ 611.440198][T21978] tap0: tun_chr_ioctl cmd 1074025681 [ 611.498154][T21981] Set syz0 is full, maxelem 0 reached [ 611.517833][T21965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4189'. [ 611.986061][T21995] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 612.573200][T22008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4202'. [ 612.594295][T22009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4202'. [ 612.610928][T22009] netlink: 'syz.1.4202': attribute type 1 has an invalid length. [ 612.638975][T22008] netlink: 'syz.1.4202': attribute type 1 has an invalid length. [ 612.691983][T22008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4202'. [ 612.823985][T22022] netlink: 'syz.3.4207': attribute type 1 has an invalid length. [ 612.831891][T22022] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4207'. [ 612.882061][T22021] Set syz0 is full, maxelem 0 reached [ 612.993739][T22039] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20002 [ 613.137240][T22045] tipc: Enabled bearer , priority 0 [ 613.166564][T22045] tipc: Disabling bearer [ 613.762051][T22063] netlink: 'syz.0.4217': attribute type 1 has an invalid length. [ 613.770732][T22063] __nla_validate_parse: 1 callbacks suppressed [ 613.770749][T22063] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4217'. [ 613.790172][T22063] netlink: 105 bytes leftover after parsing attributes in process `syz.0.4217'. [ 614.012154][T22066] vxcan1 speed is unknown, defaulting to 1000 [ 614.746202][T22071] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4219'. [ 614.837186][T22073] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4220'. [ 615.016770][T22090] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 615.038226][T22090] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4225'. [ 615.087675][T22084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4223'. [ 615.175815][T22084] vlan2: entered promiscuous mode [ 615.180884][T22084] erspan0: entered promiscuous mode [ 615.254308][T22089] vxcan1 speed is unknown, defaulting to 1000 [ 616.208321][T22116] geneve2: entered promiscuous mode [ 616.213571][T22116] geneve2: entered allmulticast mode [ 616.255848][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 616.272262][T22118] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4233'. [ 616.310870][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 616.325833][T22116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4232'. [ 616.326445][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 616.362095][T22116] vlan3: entered promiscuous mode [ 616.371458][T22116] bridge0: entered promiscuous mode [ 616.392257][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 616.532496][T22133] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4237'. [ 616.564507][ T31] INFO: task kworker/1:1H:94 blocked for more than 143 seconds. [ 616.578409][ T31] Not tainted syzkaller #0 [ 616.583463][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 616.593096][ T31] task:kworker/1:1H state:D stack:25224 pid:94 tgid:94 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 616.605757][ T31] Workqueue: kblockd blk_mq_requeue_work [ 616.611801][ T31] Call Trace: [ 616.615283][ T31] [ 616.618382][ T31] __schedule+0x1798/0x4cc0 [ 616.623521][ T31] ? do_raw_spin_lock+0x121/0x290 [ 616.628936][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 616.634781][ T31] ? __pfx___schedule+0x10/0x10 [ 616.639769][ T31] ? schedule+0x91/0x360 [ 616.644110][ T31] schedule+0x165/0x360 [ 616.648342][ T31] schedule_timeout+0x12b/0x270 [ 616.653338][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 616.658887][ T31] ? __pfx_process_timeout+0x10/0x10 [ 616.664846][ T31] ? prepare_to_wait_event+0x437/0x480 [ 616.670404][ T31] nbd_queue_rq+0x662/0xf10 [ 616.675221][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 616.680353][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 616.690513][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 616.696478][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 616.701649][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 616.707752][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 616.713631][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 616.720351][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 616.727395][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 616.732764][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 616.740309][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 616.746269][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 616.751595][ T31] blk_mq_run_hw_queues+0x33e/0x430 [ 616.757059][ T31] ? __pfx_blk_mq_run_hw_queues+0x10/0x10 [ 616.762876][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.768360][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.773571][ T31] blk_mq_requeue_work+0x717/0x760 [ 616.779560][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 616.785570][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.790786][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 616.798300][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 616.805340][ T31] process_scheduled_works+0xae1/0x17b0 [ 616.810901][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 616.817722][ T31] worker_thread+0x8a0/0xda0 [ 616.822315][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 616.830419][ T31] ? __kthread_parkme+0x7b/0x200 [ 616.835523][ T31] kthread+0x70e/0x8a0 [ 616.839615][ T31] ? __pfx_worker_thread+0x10/0x10 [ 616.844949][ T31] ? __pfx_kthread+0x10/0x10 [ 616.849554][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.854788][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.859999][ T31] ? __pfx_kthread+0x10/0x10 [ 616.864644][ T31] ret_from_fork+0x3fc/0x770 [ 616.869246][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 616.874591][ T31] ? __switch_to_asm+0x39/0x70 [ 616.879364][ T31] ? __switch_to_asm+0x33/0x70 [ 616.884243][ T31] ? __pfx_kthread+0x10/0x10 [ 616.888868][ T31] ret_from_fork_asm+0x1a/0x30 [ 616.893640][ T31] [ 616.897051][ T31] INFO: task udevd:17836 blocked for more than 143 seconds. [ 616.909235][ T31] Not tainted syzkaller #0 [ 616.916135][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 616.924882][ T31] task:udevd state:D stack:22760 pid:17836 tgid:17836 ppid:5234 task_flags:0x400140 flags:0x00004002 [ 616.936868][ T31] Call Trace: [ 616.940157][ T31] [ 616.943106][ T31] __schedule+0x1798/0x4cc0 [ 616.947742][ T31] ? blk_mq_flush_plug_list+0x41f/0x550 [ 616.953323][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 616.959854][ T31] ? __lock_acquire+0xab9/0xd20 [ 616.965778][ T31] ? __pfx___schedule+0x10/0x10 [ 616.970666][ T31] ? schedule+0x91/0x360 [ 616.974992][ T31] schedule+0x165/0x360 [ 616.979188][ T31] schedule_timeout+0x12b/0x270 [ 616.984115][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 616.989503][ T31] ? __pfx_process_timeout+0x10/0x10 [ 616.994904][T22139] vxcan1 speed is unknown, defaulting to 1000 [ 617.004126][ T31] ? prepare_to_wait_event+0x437/0x480 [ 617.009623][ T31] nbd_queue_rq+0x662/0xf10 [ 617.014266][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 617.019310][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 617.032799][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 617.043163][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 617.048778][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 617.055384][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 617.061513][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 617.068136][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 617.079806][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 617.085292][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 617.091482][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 617.101529][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 617.107130][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 617.112561][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 617.123043][ T31] ? blk_mq_dispatch_list+0x180/0xe00 [ 617.129617][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 617.140283][ T31] ? rcu_is_watching+0x15/0xb0 [ 617.145260][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 617.150835][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 617.156519][ T31] ? blk_mq_submit_bio+0x1912/0x2440 [ 617.162012][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 617.168390][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 617.173440][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 617.179094][ T31] __submit_bio+0x2d3/0x5a0 [ 617.183810][ T31] ? ktime_get+0x3e/0x1f0 [ 617.188356][ T31] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 617.195265][ T31] ? __pfx___submit_bio+0x10/0x10 [ 617.200416][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 617.206059][ T31] ? bio_associate_blkg+0x6d/0x230 [ 617.211300][ T31] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 617.217228][ T31] ? bio_associate_blkg+0x6d/0x230 [ 617.222478][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 617.229243][ T31] ? submit_bio_noacct+0xd6f/0x1a50 [ 617.235682][ T31] block_read_full_folio+0x599/0x830 [ 617.242079][T22137] vxcan1 speed is unknown, defaulting to 1000 [ 617.248419][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 617.262099][ T31] filemap_read_folio+0x114/0x380 [ 617.267261][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 617.272787][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 617.278583][ T31] do_read_cache_folio+0x350/0x590 [ 617.283712][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 617.289300][ T31] read_part_sector+0xb6/0x2b0 [ 617.294151][ T31] adfspart_check_ICS+0xa4/0xa50 [ 617.299098][ T31] ? snprintf+0xda/0x120 [ 617.303356][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 617.309010][ T31] bdev_disk_changed+0x75f/0x14b0 [ 617.314126][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 617.319599][ T31] ? wait_on_inode+0xc0/0x230 [ 617.327616][ T31] blkdev_get_whole+0x380/0x510 [ 617.332507][ T31] bdev_open+0x31e/0xd30 [ 617.341027][ T31] blkdev_open+0x3a8/0x510 [ 617.349874][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 617.354943][ T31] do_dentry_open+0x950/0x13f0 [ 617.359773][ T31] vfs_open+0x3b/0x340 [ 617.364038][ T31] ? path_openat+0x2ecd/0x3830 [ 617.368825][ T31] path_openat+0x2ee5/0x3830 [ 617.373430][ T31] ? arch_stack_walk+0xfc/0x150 [ 617.379880][ T31] ? stack_depot_save_flags+0x40/0x860 [ 617.385754][ T31] ? __pfx_path_openat+0x10/0x10 [ 617.391551][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.399691][ T31] do_filp_open+0x1fa/0x410 [ 617.407533][ T31] ? __lock_acquire+0xab9/0xd20 [ 617.412403][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 617.419654][ T31] ? _raw_spin_unlock+0x28/0x50 [ 617.425620][ T31] ? alloc_fd+0x64c/0x6c0 [ 617.430006][ T31] do_sys_openat2+0x121/0x1c0 [ 617.442217][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 617.447790][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 617.453008][ T31] ? rcu_is_watching+0x15/0xb0 [ 617.458977][ T31] __x64_sys_openat+0x138/0x170 [ 617.463855][ T31] do_syscall_64+0xfa/0x3b0 [ 617.474046][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.480138][ T31] ? asm_common_interrupt+0x26/0x40 [ 617.485487][ T31] ? clear_bhb_loop+0x60/0xb0 [ 617.490205][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.496597][ T31] RIP: 0033:0x7ff3d78a7407 [ 617.501052][ T31] RSP: 002b:00007ffc378f7e20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 617.509771][ T31] RAX: ffffffffffffffda RBX: 00007ff3d801d880 RCX: 00007ff3d78a7407 [ 617.519650][ T31] RDX: 00000000000a0800 RSI: 00005632ebe77a50 RDI: ffffffffffffff9c [ 617.531240][ T31] RBP: 00005632ebe5e910 R08: 0000000000000000 R09: 0000000000000000 [ 617.543339][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005632ebe7bf10 [ 617.552402][ T31] R13: 00005632ebe6c190 R14: 0000000000000000 R15: 00005632ebe7bf10 [ 617.560612][ T31] [ 617.570742][ T31] [ 617.570742][ T31] Showing all locks held in the system: [ 617.590634][ T31] 1 lock held by khungtaskd/31: [ 617.596110][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 617.606144][ T31] 4 locks held by kworker/1:1H/94: [ 617.611261][ T31] #0: ffff88801de98148 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 617.627049][ T31] #1: ffffc900025e7bc0 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 617.640836][ T31] #2: ffff888140ffda10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 617.654835][ T31] #3: ffff888025017bf8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 617.663767][ T31] 3 locks held by kworker/u8:6/1040: [ 617.672007][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 617.693977][ T31] #1: ffffc9000399fbc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 617.709509][ T31] #2: ffffffff8e13f9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 617.720584][ T31] 2 locks held by getty/5625: [ 617.729489][ T31] #0: ffff88814de640a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 617.739342][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 617.749829][ T31] 1 lock held by udevd/17830: [ 617.754817][ T31] #0: ffff888024fc5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 617.764190][ T31] 3 locks held by udevd/17836: [ 617.768956][ T31] #0: ffff888143753358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 617.778294][ T31] #1: ffff888140ffda10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 617.787971][ T31] #2: ffff888025008838 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 617.797199][ T31] 1 lock held by syz.1.4202/22008: [ 617.802316][ T31] #0: ffffffff8e13f880 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 617.812420][ T31] 2 locks held by syz.2.4223/22089: [ 617.819209][ T31] #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 617.831567][ T31] #1: ffffffff8e13f880 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 617.843366][ T31] 5 locks held by syz.4.4239/22137: [ 617.851577][ T31] 2 locks held by syz.4.4239/22139: [ 617.858504][ T31] #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 617.870942][ T31] #1: ffffffff8e13f9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 617.883544][ T31] [ 617.888934][ T31] ============================================= [ 617.888934][ T31] [ 617.898938][ T31] NMI backtrace for cpu 0 [ 617.898956][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 617.898973][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 617.898982][ T31] Call Trace: [ 617.898990][ T31] [ 617.898997][ T31] dump_stack_lvl+0x189/0x250 [ 617.899024][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.899045][ T31] ? __pfx__printk+0x10/0x10 [ 617.899079][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 617.899105][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 617.899131][ T31] ? __pfx__printk+0x10/0x10 [ 617.899156][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 617.899182][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 617.899208][ T31] watchdog+0xf93/0xfe0 [ 617.899235][ T31] ? watchdog+0x1de/0xfe0 [ 617.899260][ T31] kthread+0x70e/0x8a0 [ 617.899283][ T31] ? __pfx_watchdog+0x10/0x10 [ 617.899304][ T31] ? __pfx_kthread+0x10/0x10 [ 617.899325][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 617.899342][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 617.899358][ T31] ? __pfx_kthread+0x10/0x10 [ 617.899378][ T31] ret_from_fork+0x3fc/0x770 [ 617.899398][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 617.899428][ T31] ? __switch_to_asm+0x39/0x70 [ 617.899446][ T31] ? __switch_to_asm+0x33/0x70 [ 617.899465][ T31] ? __pfx_kthread+0x10/0x10 [ 617.899485][ T31] ret_from_fork_asm+0x1a/0x30 [ 617.899520][ T31] [ 617.899528][ T31] Sending NMI from CPU 0 to CPUs 1: [ 618.045930][ C1] NMI backtrace for cpu 1 [ 618.045947][ C1] CPU: 1 UID: 0 PID: 22137 Comm: syz.4.4239 Not tainted syzkaller #0 PREEMPT(full) [ 618.045966][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 618.045976][ C1] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 618.045997][ C1] Code: e8 1b 51 d4 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 10 1d be 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 fc c1 7c 00 48 c7 c3 98 ef a1 92 49 03 1e 48 89 [ 618.046011][ C1] RSP: 0018:ffffc9000422ef18 EFLAGS: 00000246 [ 618.046026][ C1] RAX: 1ffffffff1b7c3a3 RBX: 0000000000000001 RCX: 4c2ca888023d4900 [ 618.046037][ C1] RDX: 0000000000000000 RSI: ffffffff8be33860 RDI: ffffffff8be33820 [ 618.046049][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172c195 [ 618.046061][ C1] R10: ffffc9000422f058 R11: ffffffff81ac3ae0 R12: 1ffff92000845e01 [ 618.046073][ C1] R13: ffffc9000422f040 R14: ffffffff8dbe1d18 R15: dffffc0000000000 [ 618.046086][ C1] FS: 00007f52e4d046c0(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000 [ 618.046100][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.046111][ C1] CR2: 000000110c3e5c4c CR3: 0000000050740000 CR4: 00000000003526f0 [ 618.046126][ C1] Call Trace: [ 618.046133][ C1] [ 618.046139][ C1] ? kernfs_new_node+0x102/0x210 [ 618.046158][ C1] ? unwind_next_frame+0xa5/0x2390 [ 618.046174][ C1] unwind_next_frame+0xd4/0x2390 [ 618.046194][ C1] ? unwind_next_frame+0xa5/0x2390 [ 618.046211][ C1] ? __kernfs_new_node+0xd7/0x7e0 [ 618.046229][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 618.046248][ C1] arch_stack_walk+0x11c/0x150 [ 618.046268][ C1] ? kernfs_new_node+0x102/0x210 [ 618.046287][ C1] stack_trace_save+0x9c/0xe0 [ 618.046303][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 618.046323][ C1] ? rcu_is_watching+0x15/0xb0 [ 618.046339][ C1] kasan_save_track+0x3e/0x80 [ 618.046356][ C1] ? kasan_save_track+0x3e/0x80 [ 618.046373][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 618.046390][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 618.046409][ C1] ? __kernfs_new_node+0xd7/0x7e0 [ 618.046430][ C1] ? kernfs_new_node+0x102/0x210 [ 618.046470][ C1] ? __kernfs_new_node+0xd7/0x7e0 [ 618.046487][ C1] __kasan_slab_alloc+0x6c/0x80 [ 618.046506][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 618.046524][ C1] ? __kernfs_new_node+0xd7/0x7e0 [ 618.046543][ C1] __kernfs_new_node+0xd7/0x7e0 [ 618.046559][ C1] ? __lock_acquire+0xab9/0xd20 [ 618.046588][ C1] ? __pfx___kernfs_new_node+0x10/0x10 [ 618.046606][ C1] ? kernfs_root+0x1c/0x230 [ 618.046625][ C1] ? kernfs_root+0x1c/0x230 [ 618.046640][ C1] ? kernfs_root+0x1c/0x230 [ 618.046655][ C1] ? kernfs_root+0x1c/0x230 [ 618.046673][ C1] kernfs_new_node+0x102/0x210 [ 618.046692][ C1] __kernfs_create_file+0x4b/0x2e0 [ 618.046713][ C1] sysfs_add_file_mode_ns+0x238/0x300 [ 618.046737][ C1] internal_create_group+0x66d/0x1110 [ 618.046759][ C1] ? kobject_add+0x155/0x220 [ 618.046782][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 618.046807][ C1] ? rcu_is_watching+0x15/0xb0 [ 618.046824][ C1] sysfs_create_groups+0x59/0x120 [ 618.046845][ C1] ib_setup_port_attrs+0x1407/0x2070 [ 618.046880][ C1] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 618.046897][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 618.046923][ C1] ? device_add+0x70b/0xb50 [ 618.046942][ C1] add_one_compat_dev+0x3d6/0x5c0 [ 618.046965][ C1] rdma_dev_init_net+0x1dd/0x270 [ 618.046984][ C1] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 618.047008][ C1] ops_init+0x35c/0x5c0 [ 618.047029][ C1] setup_net+0x10c/0x320 [ 618.047045][ C1] ? __pfx_setup_net+0x10/0x10 [ 618.047060][ C1] ? copy_net_ns+0x304/0x4d0 [ 618.047079][ C1] ? down_read_killable+0x1d1/0x350 [ 618.047099][ C1] copy_net_ns+0x31b/0x4d0 [ 618.047114][ C1] create_new_namespaces+0x3f3/0x720 [ 618.047138][ C1] ? security_capable+0x7e/0x2e0 [ 618.047161][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 618.047177][ C1] ksys_unshare+0x4c8/0x8c0 [ 618.047199][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 618.047216][ C1] ? rcu_is_watching+0x15/0xb0 [ 618.047236][ C1] __x64_sys_unshare+0x38/0x50 [ 618.047253][ C1] do_syscall_64+0xfa/0x3b0 [ 618.047269][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.047284][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.047299][ C1] ? clear_bhb_loop+0x60/0xb0 [ 618.047316][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.047331][ C1] RIP: 0033:0x7f52e3d8eba9 [ 618.047345][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.047357][ C1] RSP: 002b:00007f52e4d04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 618.047373][ C1] RAX: ffffffffffffffda RBX: 00007f52e3fd5fa0 RCX: 00007f52e3d8eba9 [ 618.047385][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 618.047394][ C1] RBP: 00007f52e3e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 618.047404][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.047414][ C1] R13: 00007f52e3fd6038 R14: 00007f52e3fd5fa0 R15: 00007ffd1fea1028 [ 618.047439][ C1] [ 618.048521][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 618.558183][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 618.567276][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 618.577313][ T31] Call Trace: [ 618.580575][ T31] [ 618.583491][ T31] dump_stack_lvl+0x99/0x250 [ 618.588069][ T31] ? __asan_memcpy+0x40/0x70 [ 618.592644][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.597826][ T31] ? __pfx__printk+0x10/0x10 [ 618.602415][ T31] vpanic+0x281/0x750 [ 618.606386][ T31] ? __pfx_vpanic+0x10/0x10 [ 618.610877][ T31] ? preempt_schedule+0xae/0xc0 [ 618.615711][ T31] ? preempt_schedule_common+0x83/0xd0 [ 618.621162][ T31] panic+0xb9/0xc0 [ 618.624867][ T31] ? __pfx_panic+0x10/0x10 [ 618.629269][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 618.634623][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 618.640765][ T31] watchdog+0xfd2/0xfe0 [ 618.644922][ T31] ? watchdog+0x1de/0xfe0 [ 618.649241][ T31] kthread+0x70e/0x8a0 [ 618.653309][ T31] ? __pfx_watchdog+0x10/0x10 [ 618.657970][ T31] ? __pfx_kthread+0x10/0x10 [ 618.662548][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.667728][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.672922][ T31] ? __pfx_kthread+0x10/0x10 [ 618.677613][ T31] ret_from_fork+0x3fc/0x770 [ 618.682206][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 618.687338][ T31] ? __switch_to_asm+0x39/0x70 [ 618.692105][ T31] ? __switch_to_asm+0x33/0x70 [ 618.696871][ T31] ? __pfx_kthread+0x10/0x10 [ 618.701466][ T31] ret_from_fork_asm+0x1a/0x30 [ 618.706240][ T31] [ 618.709545][ T31] Kernel Offset: disabled [ 618.713875][ T31] Rebooting in 86400 seconds..